SSD content encryption and authentication
AssigneeNGD Systems, Inc.
InventorsVahab Alemzadeh, Hermes Costa, Vladimir Alves
Life of this patent
Estimating the term…
Abstract
A storage device. In some embodiments, the storage device includes a storage interface, configured to be connected to a host computer, a processing circuit, and persistent storage media. The processing circuit may be configured to: read first data from the persistent storage media in response to a read command received through the storage interface; transmit second data through the storage interface, the second data being based on the first data; receive a write command, with third data, through the storage interface; write fourth data, based on the third data, to the persistent storage media; and perform a cryptographic operation on the first data or on the third data.
Claims18
A storage device, comprising:
- a storage interface, configured to be connected, through a storage interface switch of a host computer:
- to a processor of the host computer, and
- to a network adapter of the host computer;
- a processing circuit;
- and
- persistent storage media,
- the processing circuit being configured to:
- read first data from the persistent storage media in response to a read command received, from the processor, through the storage interface switch, and through the storage interface, the first data being unencrypted;
- transmit second data through the storage interface, through the storage interface switch, and through a network interface using the network adapter, the second data being based on the first data;
- receive a write command, with third data, through the storage interface;
- write fourth data, based on the third data, to the persistent storage media, the fourth data being unencrypted;
- and
- perform a cryptographic operation on the first data or on the third data.
A method, comprising:
- reading, by a storage device, first data from persistent storage media in the storage device, in response to a read command received from a processor of a host computer, through a storage interface switch of the host computer, and through a storage interface of the storage device, the first data being unencrypted;
- transmitting second data through the storage interface, through the storage interface switch, and through a network adapter of the host computer, the second data being based on the first data;
- receiving a write command, with third data, through the storage interface;
- writing fourth data, based on the third data, to the persistent storage media, the fourth data being unencrypted;
- and
- performing a cryptographic operation on the first data or on the third data,
- wherein the storage interface is connected, through the storage interface switch:
- to a processor of the host computer, and to
- the network adapter of the host computer.
Dependencies are inferred from the claim text.