Distributed data storage system with backward attestation
AssigneeSeagate Technology LLC
InventorChristopher Nicholas Allo
Life of this patent
Estimating the term…
Abstract
A distributed data storage system can have an attestation module that is connected to the data storage device to disconnect the device from a distributed data storage network or prevent the data storage device from being initialized into the distributed data storage network. A first security evaluation of the data storage device can be conducted with the attestation module to verify an authenticity of the data storage device. The attestation module may then disconnect the network controller from the distributed data storage network and verify an authenticity of the network controller to allow the network controller and data storage device to service a data access request from a host of the distributed data storage network.
Claims18
A method comprising:
- connecting a first data storage device to a host and a second data storage device via a network controller as part of a distributed data storage network;
- linking an attestation module to the first data storage device;
- disconnecting the first data storage device from the distributed data storage network as directed by the attestation module;
- conducting a first security evaluation of the first data storage device with the attestation module;
- verifying an authenticity of the first data storage device;
- connecting the first data storage device to the distributed data storage network;
- disconnecting the network controller from the distributed data storage network as directed by the attestation module;
- executing a second security evaluation of the network controller as directed by the attestation module;
- verifying an authenticity of the network controller;
- connecting the network controller to the distributed data storage network;
- and
- servicing a data access request from the host to the first data storage device via the network controller.
A method comprising:
- connecting an attestation module to the first data storage device;
- attaching the first data storage device to a distributed data storage network comprising a network controller connecting the first data storage device to a host and a second data storage device;
- preventing the first data storage device from initializing into the distributed data storage network with the attestation module;
- conducting a first security evaluation of the first data storage device with the attestation module;
- verifying an authenticity of the first data storage device;
- initializing the first data storage device into the distributed data storage network;
- disconnecting the network controller from the distributed data storage network as directed by the attestation module;
- executing a second security evaluation of the network controller as directed by the attestation module;
- verifying an authenticity of the network controller;
- connecting the network controller to the distributed data storage network;
- and
- servicing a data access request from the host to the first data storage device via the network controller.
Dependencies are inferred from the claim text.