Back to results
US 11,307,998 B2Granted
Storage efficiency of encrypted host system data
AssigneePure Storage, Inc.
InventorsJonas R. Irwin, Ethan L. Miller, John D. Davis
Life of this patent
Estimating the term…
Abstract
A storage controller coupled to a storage array comprising one or more storage devices that performs at least one data reduction operation on decrypted data, encrypts the reduced data using a second encryption key to generate a second encrypted data, and stores the second encrypted data on the storage array.
Claims20
A cloud-based storage system comprising:
- one or more cloud computing instances hosting at least two or more logical volumes;
- and a cloud computing instance executing a storage controller application, the storage controller application configured to:
- receive a first request to write first encrypted data to a logical volume of the at least two or more logical volumes, wherein the first encrypted data comprises a first data encrypted by a first encryption key associated with a property of the data;
- decrypt the first encrypted data using a first decryption key to generate first decrypted data;
- perform at least one of a data deduplication operation or a data compression operation on the first decrypted data to generate first reduced data;
- encrypt the first reduced data using a second encryption key to generate second encrypted data, wherein the second encryption key is associated with the logical volume, wherein the at least two or more logical volumes in the cloud-based storage system store data encrypted using different encryption keys for each of the at least two or more logical volumes;
- and
- store the second encrypted data on the logical volume.
5 more elements
A method comprising:
- receiving, at a cloud computing instance executing a storage controller application, a first request to write first encrypted data to a logical volume resident on a cloud-based storage system, wherein the first encrypted data comprises a first data encrypted by a first encryption key associated with a property of the data;
- decrypting, by the storage controller application, the first encrypted data using a first decryption key to generate first decrypted data;
- performing, by the storage controller application, at least one data reduction operation on a first decrypted data to generate a first reduced data;
- encrypting, by the storage controller application, the first reduced data using a second encryption key to generate a second encrypted data, wherein the second encryption key is associated with the logical volume, wherein at least two or more logical volumes in the cloud-based storage system store data encrypted using different encryption keys for each of the at least two or more logical volumes;
- and storing the second encrypted data on the cloud-based storage system.
2 more elements
A non-transitory computer readable storage medium storing instructions, which when executed, cause one or more processor cores to instantiate a cloud computing instance of a storage controller application, the storage controller application configured to:
- receive a first request to write first encrypted data to a logical volume resident on a cloud-based storage system, wherein the first encrypted data comprises a first data encrypted by a first encryption key associated with a property of the data;
- decrypt the first encrypted data using a first decryption key to generate first decrypted data;
- perform at least one of a data deduplication operation or a data compression operation on first decrypted data to generate a first reduced data;
- encrypt the first reduced data using a second encryption key to generate second encrypted data, wherein the second encryption key is associated with the logical volume, wherein at least two or more logical volumes in the cloud-based storage system store data encrypted using different encryption keys for each of the at least two or more logical volumes;
- and store the second encrypted data on the cloud-based storage system.
2 more elements
Dependencies are inferred from the claim text.