Patent ID: 8977865
Filing Date: 2015-03-10
Classification: G06F,H04L

Abstract:
1. One or more computer-readable memory comprising computer-executable instructions for re-encrypting a set of data, the computer-executable instructions directed to steps comprising: reading a first chunk of data from a first storage location where the first chunk of data was stored, the first storage location being within a first encryption region during the reading, wherein data written to the first encryption region is encrypted with reference to a first cryptographic key prior to being stored in the first encryption region and data read from the first encryption region is decrypted with reference to the first cryptographic key after being read from the first encryption region; writing the first chunk of data into a second storage location where the first chunk of data will be stored for subsequent access, the second storage location differing from the first storage location, the second storage location being within a second encryption region during the writing, wherein data written to the second encryption region is encrypted with reference to a second cryptographic key prior to being stored in the second encryption region and data read from the second encryption region is decrypted with reference to the second cryptographic key after being read from the second encryption region, the second cryptographic key differing from the first cryptographic key; contracting the first encryption region to no longer include the first storage location; expanding the second encryption region to accommodate a second chunk of data, different from the first chunk of data, the expanding being performed after the writing of the first chunk of data into the second storage location within the second encryption region; and repeating the reading, the writing, the contracting and the expanding with successive chunks of data.