Method and device for managing storage system

An electronic device, comprising:

• at least one processor;
• and
• a memory coupled to the at least one processor, the memory comprising instructions stored thereon, which, when executed on the at least one processor, cause the device to perform acts comprising:
• in response to receiving a write request at the storage system, determining whether storage units allocated to a logic storage unit of the storage system are sufficient for data associated with the write request, the storage system being used for allocating a plurality of storage units to a logic storage unit and providing the logic storage unit to a user, the plurality of storage units derived from a physical layer that provides storage units for allocation to a support layer, the storage system including at least one other layer above the support layer for providing the logic storage unit to the user;
• in response to determining that the allocated storage units are insufficient, allocating a new storage unit to the logic storage unit;
• updating metadata associated with allocation of the storage units of the storage system, the metadata indicating a mapping between the logic storage unit and the storage units;
• and
• encrypting only a portion of the updated metadata, the portion associated with allocations of storage units from the physical layer to the support layer but excluding metadata in any layer above the support layer,
• wherein the support layer includes a sparse volume and a layer above the support layer includes a file system, and wherein the acts further comprise selectively accessing data of the logic storage unit based on decrypting the encrypted portion of metadata and recovering therefrom a mapping between the logic storage unit and the plurality of allocated storage units, and
• wherein encrypting the updated metadata comprises encrypting the updated metadata by using information associated with a hardware component of the storage system as an encryption key.

A computer program product including a set of non-transitory, computer-readable media having instructions which, when executed by control circuitry of a computerized apparatus, cause the computerized apparatus to perform a method of managing a storage system, the method comprising:

• in response to receiving a write request at the storage system, determining whether storage units allocated to a logic storage unit of the storage system are sufficient for data associated with the write request, the storage system being used for allocating a plurality of storage units to a logic storage unit and providing the logic storage unit to a user, the plurality of storage units derived from a physical layer that provides storage units for allocation to a support layer, the storage system including at least one other layer above the support layer for providing the logic storage unit to the user;
• in response to determining that the allocated storage units are insufficient, allocating a new storage unit to the logic storage unit;
• updating metadata associated with allocation of the storage units of the storage system, the metadata indicating a mapping between the logic storage unit and the storage units;
• and
• encrypting only a portion of the updated metadata, the portion associated with allocations of storage units from the physical layer to the support layer but excluding metadata in any layer above the support layer, wherein the support layer includes a sparse volume and a layer above the support layer includes a file system, and wherein the method further comprises selectively accessing data of the logic storage unit based on decrypting the encrypted portion of metadata and recovering therefrom a mapping between the logic storage unit and the plurality of allocated storage units,
• wherein encrypting the updated metadata comprises encrypting the updated metadata by using information associated with a hardware component of the storage system as an encryption key.