Method for maintenance or exchange of encryption function in storage system and storage device
AssigneeHitachi, Ltd.
InventorsMasahide KAWARASAKI, Tetsuya SHIROGANE, Shinichi NAKAYAMA
Life of this patent
Estimating the term…
Abstract
In order to quickly perform maintenance or exchange of a controller of a storage device having an encryption function in a storage system, a first controller in a Ready state spoofs a second controller subjected to maintenance or exchange to acquire key information from a key management server and to store the information in a memory, and a second controller reads the key information from the memory of the first controller to store the information in an own memory to convert the second controller into a Ready state. Then, the first controller deletes acquired key information from an own memory to convert the controller into a Halt state.
Claims10
A storage device connected to a host computer, comprising:
- a disk drive device constituted of a plurality of disks for storing encrypted data,
- a first controller for performing control of transceiving data between the first controller and the host computer, and
- a second controller for maintenance or exchange for performing control of transceiving data between the second controller and the host computer,
- wherein
- the first controller has a means for using information on authentication and identification of the second controller as acquired from a managing server to access a key management server and to acquire key information, and a means for storing in a memory the key information of the second controller as acquired from the key management server, and
- the second controller has a means for reading the key information from the memory of the first controller to write the information in a memory, and
- a means for setting the second controller per se in a Ready state.
A method for maintenance or exchange of an encryption function in a storage system comprising a storage device having a disk drive device constituted of a plurality of disks storing encrypted data, a first controller for performing control of transceiving data between the first controller and a host computer, and a second controller for maintenance or exchange for performing control of transceiving data between the second controller and the host computer,
- wherein the first controller uses information on authentication and identification of the second controller as acquired from a managing server to access a key management server and to acquire key information, and stores in a memory the key information of the second controller as acquired from the key management server,
- and the second controller reads the key information from the memory of the first controller to write the information in a memory, and sets the second controller per se to a Ready state.
Dependencies are inferred from the claim text.