Per-volume tenant encryption and external key manager
AssigneeNetApp, Inc.
InventorsDavid D. Wright, Daniel McCarthy
Life of this patent
Estimating the term…
Abstract
A server node with one or more processors is configured to receive a request to write data to a storage medium and compress the data to yield compressed data. The one or more processors are further configured to encrypt the compressed data according to an encryption key to yield compressed and encrypted data. The one or more processors are further configured to hash the compressed and encrypted data to yield one or more block identifiers that uniquely represent the compressed and encrypted data.
Claims20
A server node comprising one or more processors configured to:
- receive a request to write data to a storage medium;
- compress the data to yield compressed data;
- encrypt the compressed data according to an encryption key to yield compressed and encrypted data;
- and
- hash the compressed and encrypted data to yield one or more block identifiers that uniquely represent the compressed and encrypted data.
A method of writing data at a server node comprising:
- receiving a request to write data to a storage medium;
- compressing the data to yield compressed data;
- encrypting the compressed data according to an encryption key to yield compressed and encrypted data;
- and
- hashing the compressed and encrypted data to yield one or more block identifiers that uniquely represent the compressed and encrypted data.
A method of reading data at a server node comprising:
- receiving a request to read encrypted and compressed data stored on a storage medium;
- determining, based on the request, one or more block identifiers that uniquely represent the compressed and encrypted data, and further wherein the one or more block identifiers indicate address of the encrypted and compressed data on the storage medium;
- decrypting the encrypted and compressed data according to an encryption key to yield compressed data;
- and
- decompressing the compressed data to yield data.
Dependencies are inferred from the claim text.