# US 12,120,101 B2 · Inflight network data encryption > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,120,101 B2 - Document ID: US12120101B2 - Status: Granted - Kind: B2 - Application number: 17/852,976 - Filed: 2022-06-29 - Published: 2024-01-04 - Granted: 2024-10-15 - Earliest claimed: 2022-06-29 - Assignees: Truist Bank - Applicants: Truist Bank - Inventors: Kenneth Hall; Michael Radonis; Bobby Len Robins - Web page: https://patentgrep.com/patent/US12120101B2 ## CPC - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - G06F 16/183: {Provision of network file services by network file servers, e.g. by using NFS, CIFS (network file access protocols H04L67/1097)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract One example described herein includes a system that can perform an inflight encryption of data from a server to a network attached storage (NAS) device. The system can include a first network adapter card that can receive data from the server via a network file system (NFS) protocol. The first network adapter card can determine that the data is unencrypted based at least in part on receiving the data via an NFS port of the server. The first network adapter card can encrypt the data based at least in part on the data being received via the NFS port. The system can transmit the encrypted data to the NAS device via a second network adapter card, where the second network adapter card is configured to decrypt the encrypted data. ## Claims ### Claim 1 A system comprising: a processor arranged on a first network adapter card; and a memory that includes instructions executable by the processor for causing the processor to: receive a first data from a server via a network file system (NFS) protocol, wherein the first data is to be transmitted to a network attached stored (NAS) device via the first network adapter card, wherein the first network adapter card is configured for inflight encryption of the first data; determine that the first data from a server was received via an NFS port of a plurality of ports; determine that the first data is unencrypted based at least in part on receiving the first data via the NFS port of the plurality of ports; encrypt the first data based at least in part on the first data being received via the NFS port; and transmit the encrypted first data to the NAS device via the second network adapter card, wherein the second network adapter card is configured for inflight decryption of the encrypted first data received from the first network adapter card. ### Claim 2 (depends on 1) The system of claim 1, wherein the first data comprises a request to access a file stored at the NAS device. ### Claim 3 (depends on 1) The system of claim 1, wherein the first network adapter card comprises a first cryptographic key and a second cryptographic key, and wherein the instructions executable by the processor further cause the processor to: encrypt the first data using the first cryptographic key; and sign the encrypted first data using the second cryptographic key. ### Claim 4 (depends on 1) The system of claim 1, wherein the instructions executable by the processor further cause the processor to: receive an encrypted second data from the second network adapter card via the NFS protocol; decrypt the encrypted second data based at least in part on receiving the encrypted second data via the NFS protocol; and transmit the decrypted second data to the server via the NFS port. ### Claim 5 (depends on 1) The system of claim 1, wherein the first network adapter card is arranged on a communication path between the server and the second network adapter card. ### Claim 6 (depends on 1) The system of claim 1, wherein the first network adapter card is physically coupled to the server. ### Claim 7 (depends on 1) The system of claim 1, wherein first data comprises remote procedure call stub parameters. ### Claim 8 A method comprising: receiving, by a first network adapter card, a first data from a server via a network file system (NFS) protocol, wherein the first data is to be transmitted to a network attached stored (NAS) device via a first network adapter card, wherein the first network adapter card is configured for inflight encryption of the first data; determine that the first data from a server was received via an NFS port of a plurality of ports; determining, by the first network adapter card, that the first data is unencrypted based at least in part on receiving the first data via an NFS port of the plurality of ports; encrypting, by the first network adapter card, the first data based at least on part on the first data being received via the NFS port; and transmitting the encrypted first data to NAS device via the second network adapter card, wherein the second network adapter card is configured for inflight decryption of the encrypted first data received from the first network adapter card. ### Claim 9 (depends on 8) The method of claim 8, wherein the first data comprises a request to access a file stored at the NAS device. ### Claim 10 (depends on 8) The method of claim 8, wherein the first network adapter card comprises a first cryptographic key and a second cryptographic key, and wherein the method first comprises: encrypt the first data using the first cryptographic key; and sign the encrypted first data using the second cryptographic key. ### Claim 11 (depends on 8) The method of claim 8, wherein the method further comprises: receiving an encrypted second data from the second network adapter card via the NFS protocol; decrypting the encrypted second data based at least in part on receiving the encrypted second data via the NFS protocol; and transmitting the decrypted second data to the server via the NFS port. ### Claim 12 (depends on 8) The method of claim 8, wherein the first network adapter card is arranged on a communication path between the server and the second network adapter card. ### Claim 13 (depends on 8) The method of claim 8, wherein the first network adapter card is physically coupled to the server. ### Claim 14 (depends on 8) The method of claim 8, wherein data comprises remote procedure call stub parameters. ### Claim 15 A non-transitory computer-readable medium comprising program code that is executable by a processor for causing the processor to: receive, by a first network adapter card, a first data from a server via a network file system (NFS) protocol, wherein the first data is to be transmitted to a network attached stored (NAS) device via a first network adapter card, wherein the first network adapter card is configured for inflight encryption of the first data; determine that the first data from a server was received via an NFS port of a plurality of ports; determine, by the first network adapter card, that the first data is unencrypted based at least in part on receiving the first data via an NFS port of the plurality of ports; encrypt, by the first network adapter card, the first data based at least on part on the first data being received via the NFS port; and transmit the encrypted first data to the NAS device via the second network adapter card, wherein the second network adapter card is configured for inflight decryption of the encrypted first data received from the first network adapter card. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the first data comprises a request to access a file stored at the NAS device. ### Claim 17 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the first network adapter card comprises a first cryptographic key and a second cryptographic key, and wherein program code that is executable by the processor further causes the processor to: encrypt the first data using the first cryptographic key; and sign the encrypted first data using the second cryptographic key. ### Claim 18 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein program code that is executable by the processor further causes the processor to: receive an encrypted second data from the second network adapter card via the NFS protocol; decrypt the encrypted second data based at least in part on receiving the encrypted second data via the NFS protocol; and transmit the decrypted second data to the server via the NFS port. ### Claim 19 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the first network adapter card is arranged on a communication path between the server and the second network adapter card. ### Claim 20 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the first network adapter card is physically coupled to the server.