US 10,540,504 B2 · Distributed data method for encrypting data

Abstract

Techniques for performing data encryption on data to be stored within a storage system are provided. A client application executing on a host machine may generate a data storage write request to write data to a storage system. A host-side module, executing on the host machine receives the write request. The host-side module is configured to generate one or more fingerprints for the data corresponding to the write request, where the one or more fingerprints are unique identifiers used to identify data blocks that make up the data. The host-side module generates encrypted data by encrypting the data blocks using an encryption technique. The encrypted data is then sent to a storage node within the storage system. Deduplication may be performed on the encrypted data using the one or more generated fingerprints.

Claims17

Dependent claims

A method for encrypting data in a storage system comprising:

receiving a data storage write request;
wherein the data storage write request includes particular data to be written;
wherein the data storage write request is received from a client executing on a host machine;
wherein the data storage write request is received at a host-side module executing on the host machine;
generating, by the host-side module, one or more fingerprints based on the particular data;
generating by the host-side module, encrypted data by encrypting the particular data;
packaging the encrypted data into one or more clumps;
generating one or more clump fingerprints for the one or more clumps based on the one or more fingerprints;
and
sending the encrypted data to a storage node separate from the host machine.

7 more elements

A non-transitory computer-readable medium that stores instructions for encrypting data in a storage system which, when executed by one or more processors, cause performance of:

receiving a data storage write request;
wherein the data storage write request includes particular data to be written;
wherein the data storage write request is received from a client executing on a host machine;
wherein the data storage write request is received at a host-side module executing on the host machine;
generating, by the host-side module, one or more fingerprints based on the particular data;
generating by the host-side module, encrypted data by encrypting the particular data;
packaging the encrypted data into one or more clumps;
generating one or more clump fingerprints for the one or more clumps based on the one or more fingerprints;
and
sending the encrypted data to a storage node separate from the host machine.

7 more elements

Dependencies are inferred from the claim text.

Distributed data method for encrypting data

Life of this patent

Distributed data method for encrypting data

Life of this patent

Abstract

Claims17