System and Method for Secure Data Storage
AssigneeSun Microsystems, Inc.
InventorsJames P. Hughes, George R. Nelson
Life of this patent
Estimating the term…
Abstract
A system and a method for secure data storage includes one or more data storage devices. A storage area network places the one or more data storage devices in communication with one or more user interfaces. A secure data solution includes a log structured driver interfacing with the one or more data storage devices to encrypt and secure data stored thereon. The log structured driver encrypts and decrypts data into a plurality of segments created on the one or more data storage devices. The system includes a traffic masking pattern that is used to obscure activity on the system from potential attackers.
Claims20
A system for secure data storage, the system comprising:
- one or more data storage devices;
- one or more user interfaces in communication with the one or more data storage devices through a storage area network;
- and
- a data solution for securing data retained on the one or more data storage devices, the solution including log structured driver interfacing with the storage devices to secure data stored on the one or more storage devices to encrypt and decrypt data into a plurality of segments created on the one or more data storage devices,
- wherein a traffic masking pattern is used to obscure activity on the system from potential attackers.
A method of secure data storage, the method comprising:
- providing one or more data storage devices and an operating system interfacing with and controlling the one or more data storage devices;
- providing a log structured driver interfacing with the operating system one or more storage devices;
- creating a plurality of segments on the one or more data storage devices;
- writing data to the plurality of segments using the log structured driver to encrypt the data is a secure manner;
- and
- implementing a traffic masking pattern to obscure activity on the system from potential attackers.
For use in secure data storage system, a log structured driver interfacing with one or more storage devices to secure data stored on one or more of a plurality of segments on the storage devices, the log structural driver comprising:
- a load/unload subsystem that initializes activation of the log structured driver;
- a configuration subsystem defining the information needed to provide the association between the log structured driver and the one or more data storage devices;
- an I/O subsystem that creates threads between the log structured driver and one or more data storage devices;
- a cache subsystem implementing a hash table that links blocks of user data to data in segments;
- and
- a data reclamation subsystem that runs when the number of free segments on the one or more storage devices falls below a predetermined level.
Dependencies are inferred from the claim text.