Canister-based storage system security
OwnerSteven McCown, Stephen Selkirk +3inventors
InventorsSteven McCown, Stephen Selkirk, Charles Milligan, James Hughes, Jacques Debiez
Life of this patent
Estimating the term…
Abstract
Security is provided for a data set stored in a data storage canister. The data set has a data size when received for storage within the canister. At least one data security operation is performed on the received data set to generate secure data having a secure data size that may be different than the set data size. The secure data is stored on at least one data storage device within the canister. Any information about the secure data size is kept from the data producer sending the data set for storage.
Claims18
A data storage system comprising:
- at least one data producer generating data for storage;
- a key server providing a data security key;
- and
- at least one data storage canister, each data storage canister comprising a plurality of data storage devices and a controller, the controller in communication with the plurality of data storage devices, the at least one data producer and the key server, the controller operative to
- (a) receive data for storage within the canister, the data having a size of N words,
- (b) receive the data security key from the key server,
- (c) perform at least one data security operation on the received data with the received data security key to generate secure data, the secure data having a size of N+K words, and
- (d) store the N+K words on at least one of the plurality of data storage devices;
- whereby the at least one data producer is unaware that the N words of data are stored as N+K words within the canister.
A method of operating a data storage canister, the data storage canister including a plurality of data storage devices and a controller through which access to the data storage devices is provided, the method comprising:
- receiving data for storage within the canister, the data having a set data size, the data received from a data producer;
- performing at least one data security operation on the received data with a data security key to generate secure data, the secure data having a secure data size different than the set data size;
- storing the secure data on at least one of the plurality of data storage devices;
- and
- hiding any information about the secure data size from the data producer.
A data storage canister comprising:
- a plurality of data storage devices disposed within the data storage canister;
- and
- a controller disposed within the data storage canister, the controller in communication with the plurality of data storage devices and a data producer outside the data storage canister, the controller performing at least one security operation on data received by the canister for storage on the plurality of data storage devices, the received data is received from the producer data system having a received data size, the at least one security operation generating secure data having a secure data size different than the received data size, the controller hiding information about the secure data size from the producer data system and hiding information about the received data size from the plurality of data storage devices.
Dependencies are inferred from the claim text.