Patent ID: 8788806
Filing Date: 2014-07-22
Classification: H04L

Abstract:
1. A method, which comprises: generating a block key on a first client machine, wherein said block key is a combination of an initialization vector and a file key; encrypting a data block on said first client machine with said block key; encrypting said block key on said first client machine with a public key associated with a user; associating said encrypted block key with said encrypted data block as crypto metadata; caching said encrypted data block and said crypto metadata on said first client machine in a local encryption cache; sending said encrypted data block and said crypto metadata from said first client machine to a network file system server wherein said cached encrypted data block and said crypto metadata remain on one of said first client machine or said network file system server until receipt of a return code indicating successful writes of said encrypted first data block and said crypto metadata by said network file system server; and, clearing said cached encrypted data block and said crypto metadata upon receipt of the return code indicating successful writes of said encrypted data block and said crypto metadata by said network file system server.