Multi-tenant encryption on distributed storage having deduplication and compression capability
A tenant's clear text data in a multi-tenant storage system can be encrypted using the tenant's cryptographic key to produce encrypted yet compressible data (“cryptographic data”). The cryptographic data can be encrypted using a system cryptographic key that is managed by the multi-tenant storage system and then stored. Use of the system cryptographic key allows for subsequent maintenance activities such as deduplication and compression to be performed on data stored in the multi-tenant storage system without having to access any of the tenants' cryptographic keys.
VMware, Inc.
H H G H H G G H H H H
H03M H04L G06F H04L H04L G06F G06F H04L H03M H04L H04L
inventional inventional inventional inventional inventional additional inventional inventional inventional inventional inventional
Haoran Bryan Wenguang Eric Xin Pascal Jin
Zheng Fink Wang Knauft Li Renauld Zhang