Remote self encrypted drive control method and system
AssigneeVolumez Technologies Ltd.
InventorJonathan Amit
Life of this patent
Estimating the term…
Abstract
A data storage method and system comprising: at least one encrypted server that comprise a storage volume and configured to run an operating system designated to host data accessible and exposable over a data plane (DP) network, at least one orchestrator configured to interact with each of said server and designated to control a control plane (CP) of said DP network, wherein the orchestrator is configured to manage the encryption by storing at least one key in its database such that the key is stored separately from the server, and wherein the orchestrator is configured to deliver the key to the server using a tunnel without exposing the key to the server.
Claims20
A data storage system, comprising:
- (i) at least one encrypted server that comprise a storage volume and configured to run an operating system designated to host data accessible and exposable over a data plane (DP) network,
- (ii) at least one orchestrator configured to interact with each of said server and designated to control a control plane (CP) of said DP network,
- wherein the orchestrator is configured to manage the encryption by storing at least one key in its database such that the key is stored separately from the server, and
- wherein the orchestrator is configured to deliver the key in order to open the encrypted server using a tunnel without exposing the key to the server.
A method for orchestrating and storing data, comprising the steps of:
- (i) enabling at least one encrypted server that comprise a storage volume and configured to run an operating system to host data accessible and exposable over a data plane (DP) network, and
- (ii) enabling at least one orchestrator to interact with each of said servers to control a control plane (CP) of said DP network,
- wherein the orchestrator is configured to manage the encryption by storing at least one key in its database such that the key is stored separately from the server, and
- wherein the orchestrator is configured to deliver the key in order to open the encrypted server using a tunnel without exposing the key to the server.
Dependencies are inferred from the claim text.