Automation of coordination of encryption keys in a SAN based environment where an encryption engine, device management, and key management are not co-located
US8498417B1 · kind B1 · utility
Assignee
Inventors
Key dates
| Filing date | Mar 6, 2008 |
| Grant date | Jul 30, 2013 |
| Priority date | — |
| Expiry date | Mar 21, 2032 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L67/1097
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A key management server in a storage area network (SAN) provides encryption keys for source and destination storage objects and also associates destination storage objects with source storage objects. When a source object is to be replicated, a replication facility in a storage system of a new destination object requests the key management server to associate the destination object with the source object and assign the data encryption key of the source object or a new data encryption key to the destination object. For recovery of the source object, a replication facility in the storage system of the source object obtains information from the key management server about the replica associated with the source object for replicating data from the destination object back to the source object.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.