Secure deletion operations in a wide area network

Patent metadata

Field	Value
Publication number	US-9495377-B2
Application number	US-201213611460-A
Country	US
Kind code	B2
Filing date	Sep 12, 2012
Priority date	Sep 12, 2012
Publication date	Nov 15, 2016
Grant date	Nov 15, 2016

Abstract

Methods, systems, and computer program products are provided for performing a secure delete operation in a wide area network (WAN) including a cache site and a home site. A method includes identifying a file for deletion at the cache site, determining whether the file has a copy stored at the home site, detecting a location of the copy at the home site prior to a disconnection event of the cache site from the home site, deleting the file from the cache site during the disconnection event, and performing a secure deletion of the copy at the home site immediately after a reconnection event of the cache site to the home site.

First claim

What is claimed is:

1. A method of performing a secure delete operation in a wide area network (WAN) including a cache site and a home site, the method comprising:
during a disconnection event of the cache site and the home site, identifying and receiving a request to perform a secure deletion of a file at the cache site;
determining whether the file has a copy stored at the home site;
detecting a location of the copy at the home site prior to a disconnection event of the cache site from the home site;
in response to the secure deletion of the file not being complete during the disconnection event, indicating on a table a remote inode number assigned to the copy associated with the file at the home site, a name under which the copy is saved, and a list of data chunk tuples specifying selected data of the copy to undergo secure deletion;
securely deleting the file from the cache site during the disconnection event by performing defined write patterns for each block of the file;
performing a secure deletion of the copy at the home site immediately after a reconnection event of the cache site to the home site;
identifying the file for secure deletion by identifying the selected data in the file for secure deletion on the cache site; and
wherein:
the step of detecting the location includes detecting a location of the selected data in the file at the home site prior to the disconnection event, and the list of data chunk tuples includes a start offset and an end offset for each data chunk tuple;
wherein performing the secure deletion includes triggering the secure deletion during a resynchronization process between the home site and the cache site.

2. The method of claim 1 , wherein the step of receiving a request to perform a secure deletion includes identifying the file for secure deletion and identifying selected data in the file for secure deletion at the cache site.

3. The method of claim 2 , wherein detecting the location includes detecting the location of the selected data in the file at the home site prior to the disconnection event.

4. The method of claim 1 , further comprising synchronizing data between the cache site and the home site, after performing secure deletion of the copy at the home site.

5. The method of claim 1 , further comprising:
synchronizing the cache site and the home site for data other than the identified file for secure deletion; and
performing secure deletion of the copy of the identified filed for secure deletion at the home site during synchronizing.

6. A system of performing a secure delete operation in a wide area network (WAN) comprising:
a computer processor;
a cache site;
a home site; and
a network server providing communication between the cache site and the home site, the network server:
during a disconnection event of the cache site and the home site, identifying and receiving a request to perform a secure deletion of a file at the cache site;
determining whether the file has a copy stored at the home site;
detecting a location of the copy at the home site prior to a disconnection event of the cache site from the home site;
in response to the secure deletion of the file not being complete during the disconnection event, indicating on a table a remote inode number assigned to the copy associated with the file at the home site, a name under which the copy is saved, and a list of data chunk tuples specifying selected data of the copy to undergo secure deletion;
securely deleting the file from the cache site during the disconnection event by performing defined write patterns for each block of the file;
performing a secure deletion of the copy at the home site immediately after a reconnection event of the cache site to the home site;
identifying the file for secure deletion by identifying the selected data in the file for secure deletion on the cache site; and

wherein:
the step of detecting the location includes detecting a location of the selected data in the file at the home site prior to the disconnection event, and
the list of data chunk tuples includes a start offset and an end offset for each data chunk tuple;
wherein the network server is performing the secure deletion by triggering the secure deletion during a resynchronization process between the home site and the cache site.

7. The system of claim 6 , wherein the network server is receiving a request to perform a secure deletion by identifying the file for secure deletion and identifying selected data in the file for secure deletion at the cache site.

8. The system of claim 7 , wherein the network server is detecting the location by detecting the location of the selected data in the file at the home site prior to the disconnection event.

9. The system of claim 6 , wherein the network server is synchronizing data between the cache site and the home site, after performing secure deletion of the copy at the home site.

10. The system of claim 6 , wherein the network server is:
synchronizing the cache site and the home site for data other than the identified file for secure deletion; and
performing secure deletion of the copy of the identified filed for secure deletion at the home site during synchronizing.

11. A computer program product for performing a secure delete operation in a wide area network (WAN) including a cache site and a home site, the computer program product having non-transitory computer-readable program code portions stored therein adapted for:
during a disconnection event of the cache site and the home site, identifying and receiving a request to perform a secure deletion of a file at the cache site;
determining whether the file has a copy stored at the home site;
detecting a location of the copy at the home site prior to a disconnection event of the cache site from the home site;
in response to the secure deletion of the file not being complete during the disconnection event, indicating on a table a remote inode number assigned to the copy associated with the file at the home site, a name under which the copy is saved, and a list of data chunk tuples specifying selected data of the copy to undergo secure deletion;
securely deleting the file from the cache site during the disconnection event by performing defined write patterns for each block of the file;
performing a secure deletion of the copy at the home site immediately after a reconnection event of the cache site to the home site;
identifying the file for secure deletion by identifying the selected data in the file for secure deletion on the cache site; and
wherein:
the step of detecting the location includes detecting a location of the selected data in the file at the home site prior to the disconnection event, and
the list of data chunk tuples includes a start offset and an end offset for each data chunk tuple;
wherein performing the secure deletion includes triggering the secure deletion during a resynchronization process between the home site and the cache site.

12. The computer program product of claim 11 , wherein the step of receiving a request to perform a secure deletion includes identifying the file for secure deletion and identifying selected data in the file for secure deletion at the cache site.

13. The computer program product of claim 12 , wherein detecting the location includes detecting a location of the selected data in the file at the home site prior to the disconnection event.

14. The computer program product of claim 11 , further adapted for synchronizing data between the cache site and the home site, after performing secure deletion of the copy at the home site.

15. The computer pr

Assignees

• Blount Lawrence Carter
• Ghuge Deepak Rambahu
• Islam Shah Mohammad Rezaul
• Patil Sandeep Ramesh
• Shiraguppi Riyazahamad Moulasab
• Tewari Renu
• IBM

Inventors

• Blount Lawrence Carter
• Ghuge Deepak Rambahu
• Islam Shah Mohammad Rezaul
• Patil Sandeep Ramesh
• Shiraguppi Riyazahamad Moulasab
• Tewari Renu

Classifications

• G06F17/30575

  Physics · mapped topic

• G06F17/30117 Primary

  Physics · mapped topic

• G06F16/162 Primary

  Delete operations (erasing in storage systems G06F3/0652) · CPC title

• G06F16/172

  Caching, prefetching or hoarding of files · CPC title

• G06F16/27 Primary

  Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor · CPC title