| 主权项 |
1. A method for use in encrypting in deduplication systems, the method comprising:
applying a deduplicating technique to a data block, wherein applying the deduplicating technique comprises computing a digest of the data block and retrieving a deduplication key for the data block from metadata of the data block, wherein applying the deduplicating technique includes iterating over a set of data blocks, determining another data block from the set of data blocks identical to the data block by comparing the digest and deduplication key of the data block with digests and deduplication keys stored in an index table, and based on the determination, mapping the data block to the another data block, wherein the deduplication key is associated with the digest of the data block, wherein the deduplication key and the digest is stored in the index table, wherein the deduplication key is used for deduplicating and encrypting the data block, wherein the deduplication key for the data block includes an offset for the data block, a data block number, and a generation count, wherein the generation count for the data block is updated each time the data block is updated by a write operation, wherein the metadata of the data block includes a flag indicating whether the data block has been encrypted; using the digest of the data block as an encryption key for the data block; and encrypting the data block using the encryption key. |
