Storage device with hybrid encryption levels
AssigneeSanDisk Technologies LLC
InventorsAriel Navon, Shay Benisty
Life of this patent
Estimating the term…
Abstract
Data security is challenging. Oftentimes it is desired to be able to encrypt the data, yet still search the data efficiently. One manner of achieving the goal is to store the data and keyword metadata separately. The data and keyword metadata can even be encrypted differently where the data has a stricter encryption compared to the keyword metadata. Furthermore, if a security threat is detected, the encryption type can be changed to a more restrictive encryption. Once the security threat has passed, the encryption can be changed to a less restrictive encryption.
Claims17
A data storage device, comprising:
- a memory device;
- and
- a controller coupled to the memory device, wherein the controller is configured to:
- place data in a first physical location of the memory device;
- place keyword metadata of the data in a second physical location of the memory device, wherein the first physical location and the second physical location are distinct and different;
- encrypt the data with deterministic encryption;
- encrypt the keyword metadata, wherein the encryption for the data is different from the encryption for the keyword metadata;
- determine that there is a security risk for the data;
- in response to the determining that there is a security risk, convert the data encrypted with deterministic encryption to data encrypted with non-deterministic encryption;
- and
- change the type of encryption back to deterministic based upon determining that there is no security risk for the data, wherein the encryption for the data provides a higher level of security than the encryption for the keyword metadata.
A data storage device, comprising:
- means to store data;
- and
- a controller coupled to the means to store data, wherein the controller is configured to:
- detect whether a security risk to data stored in the means to store data is present, wherein the data stored in the means to store data is encrypted with deterministic encryption;
- change the encryption for the data from deterministic encryption to non-deterministic encryption based upon the detecting;
- and
- change the type of encryption back to deterministic based upon determining that there is no security risk, wherein the encryption for the data provides a higher level of security than encryption for metadata.
Dependencies are inferred from the claim text.