Patent ID: 9602283
Date: 2017-03-21
CPC Classifications: G06F,H04L

Claim:
1. A method comprising: assigning a plurality of tenant keys to a plurality of tenants, each tenant being assigned a specific tenant key of the plurality of tenant keys; storing in a storage system a plurality of raw data objects backed up for the plurality of tenants; storing in the storage system a plurality of fingerprints, corresponding to the plurality of raw data objects, in a single use key encrypted format; wrapping, by a hardware processor, the plurality of fingerprints with a storage system key held by the storage system; receiving, from a first tenant, a request to retrieve data backed up on the storage system for the first tenant, the request comprising a set of fingerprints corresponding to a set of raw data objects to retrieve, and a first tenant key assigned to the first tenant, the set of fingerprints being in the single use key encrypted format and wrapped with the first tenant key; unwrapping, using the first tenant key, the received set of fingerprints to retrieve the set of raw data objects corresponding to the received set of fingerprints; transmitting the set of raw data objects to the first tenant; and removing the first tenant key from the storage system.