Back to results
US 11,113,409 B2Granted
Efficient rekey in a transparent decrypting storage array
AssigneePure Storage, Inc.
InventorsConstantine P. Sapuntzakis, Kiron Vijayasankar, Yuval Frandzel
Life of this patent
Estimating the term…
Abstract
A method of efficient rekey in a transparent decrypting storage array includes receiving an instruction to rekey data on a storage array, wherein the instruction identifies first encryption information and second encryption information. The method further includes decrypting, by a processing device of a storage array controller, the data using the first encryption information to generate decrypted data. The method further includes encrypting the decrypted data using the second encryption information to generate encrypted data.
Claims16
A method, comprising:
- decrypting, by a processing device of a storage array controller, encrypted write data to be stored at a storage array and encrypting, by the processing device of the storage array controller, read data to be sent by the storage array controller to a client device using a first encryption key;
- receiving an instruction to rekey data at the storage array, wherein the instruction identifies first encryption information that identifies the first encryption key and second encryption information that identifies a second encryption key, and;
- writing, by the processing device of the storage array controller, metadata that instructs a storage application executed by the processing device of the storage array controller to use the second encryption key to encrypt the data for subsequent read operations and decrypt the data for subsequent write operations.
A storage system comprising:
- a storage array comprising one or more storage devices;
- and
- a storage array controller coupled to the storage array, the storage array controller to:
- decrypt encrypted write data to be stored at a storage array and encrypt read data to be sent by the storage array controller to a client device using a first encryption key;
- receive an instruction to rekey data at the storage array, wherein the instruction identifies first encryption information that identifies the first encryption key and second encryption information that identifies a second encryption key, and;
- writing, by the storage array controller, metadata that instructs a storage application executed by the storage array controller to use the second encryption key to encrypt the data for subsequent read operations and decrypt the data for subsequent write operations.
3 more elements
Dependencies are inferred from the claim text.