SYSTEM AND METHOD FOR ENCRYPTING SECONDARY COPIES OF DATA

摘要

A system and method for encrypting secondary copies of data is described. In some examples, the system encrypts a secondary copy of data after the secondary copy is created. In some examples, the system looks to information about a data storage system, and determines when and where to encrypt data based on the information.

主权项

1. A system of re-encrypting data copied to one or more secondary storage devices comprising:
a storage manager comprising at least computer hardware configured to process information about a data storage operation associated with copying data stored on one or more primary storage devices to one or more secondary devices; the storage manager further configured to estimate a completion time required to encrypt and copy the data; when the completion time exceeds a threshold, the storage manager is configured to determine a first subset of the data to store as a non-encrypted first subset; an encryption component comprising at least computer hardware configured to encrypt a second subset of the data to store as an encrypted second subset, wherein the encryption component is configured to encrypt the second subset based on a first encryption scheme; and the encryption component further decrypts the encrypted second subset associated with the first encryption scheme and re-encrypts at least a portion of the second subset with a second encryption scheme, wherein at least a portion of the non-encrypted first subset remains non-encrypted.