Selective shredding in a deduplication system

摘要

Making a target file impractical to be retrieved comprises decrypting a directory manager file using a first directory manager file key. The directory manager file includes an encryption key for a segment that is used when reconstructing a target file. The directory manager file is modified by deleting a reference to the target file. The reference includes a file encryption key. Retrieving the target file is made impractical by the deletion of the reference to the target file in the directory manager file. The modified directory manager file is encrypted using a second directory manager file key.

主权项

1. A system for making a target file impractical to be retrieved, comprising:
a hardware processor configured to: decrypt a directory manager file using a first directory manager file key, wherein the directory manager file includes an encryption key for a segment that is used when reconstructing a target file, wherein the encryption key for the segment is stored in a hierarchical data structure that is encrypted using the first directory manager file key; modify the directory manager file by deleting a reference to the target file, wherein the reference includes a target file encryption key; and encrypt the modified directory manager file using a second directory manager file key.