Storage system, storage control apparatus, and storage control method
AssigneeFujitsu Limited
InventorHiroshi OKAMOTO
Life of this patent
Estimating the term…
Abstract
In a storage system, a storage apparatus has an encryption key generator and an encryption processor that encrypts data to be recorded in a storage region using an encryption key from the encryption key generator, and is able to change an encryption key for each divided region set in the storage region. A control apparatus has a logical volume setting unit that requests the encryption processor to set an individual divided region for each storage region set as a logical volume in the storage region of the storage apparatus and a data erasure processor that requests the encryption processor to change the encryption key used for encryption in the divided region corresponding to the logical volume to be erased.
Claims18
A storage system comprising:
- a storage apparatus;
- and
- a control apparatus that controls access to the storage apparatus, wherein:
- the storage apparatus includes:
- an encryption key generator that generates an encryption key;
- and
- an encryption processor configured to encrypt data using an encryption key generated by the encryption key generator and record the data in a storage region of the storage apparatus, and to be able to change an encryption key used for encryption for each divided region set in the storage region of the storage apparatus;
- and
- the control apparatus includes:
- a logical volume setting unit that requests the encryption processor of the storage apparatus to set an individual divided region for each storage region set as a logical volume in the storage region of the storage apparatus;
- and
- a data erasure processor that requests the encryption processor of the storage apparatus to change the encryption key used for encryption of the divided region corresponding to the logical volume to be erased.
A storage control apparatus that connects with a storage apparatus having a function to generate an encryption key and encrypt data to be recorded in a storage region using the generated encryption key, and controls access to the storage apparatus, the storage control apparatus comprising:
- a logical volume setting unit that requests the storage apparatus to set a divided region in which an encryption key used for encryption of recorded data is allowed to be changed individually, for each storage region set as a logical volume in the storage region of the storage apparatus, and
- a data erasure processor that requests the storage apparatus to change the encryption key used for encryption in the divided region corresponding to the logical volume to be erased.
A storage control method of a storage control apparatus that connects with a storage apparatus including a function to generate an encryption key and encrypt data to be recorded in a storage region using the generated encryption key, the storage control method comprising:
- requesting, by the storage control apparatus, the storage apparatus to set a divided region in which an encryption key used for encryption of recorded data is allowed to be changed individually, for each storage region set as a logical volume in the storage region of the storage apparatus;
- and
- requesting, by the storage control apparatus, the storage apparatus to change the encryption key used for encryption in the divided region corresponding to the logical volume to be erased.
Dependencies are inferred from the claim text.