File system design with assured delete

This paper describes a system that supports high availability of data, until the data should be expunged, at which time the system makes it impossible to recover the data. This design supports two types of assured delete; where the expiration time is known at file creation, and on-demand delete of individual files. The design assures previous work has described how to do this when the expiration time of a file is known at file creation time, and was particularly suited to supporting many independent clients. This paper reviews that work, but also describes how to support on-demand deletion of individual files