Sharing encryption-related metadata between multiple layers in a storage I/O stack
US8751828B1 · kind B1 · utility
Assignee
Inventors
Key dates
| Filing date | Dec 23, 2010 |
| Grant date | Jun 10, 2014 |
| Priority date | — |
| Expiry date | Jun 18, 2032 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/6218
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A host in an encrypted data storage system sends encryption metadata associated with an encrypted logical volume (LV) from a key controller module to an encryption endpoint via a storage I/O stack. The encryption metadata identifies an encryption key and encrypted regions of the LV, and the sending results in establishment of one or more shared associations between the key controller module and the encryption endpoint which associates the encrypted LV with the encryption metadata for the encrypted LV. A data storage operation is performed on the encrypted LV by sending a data storage command from the key controller module to an encrypted region of the encryption endpoint via the storage I/O stack. The encryption endpoint uses the encryption metadata associated with the encrypted LV to cryptographically process data of the data storage operation.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.