Self-Encryption Drive (SED)
AssigneeMarvell World Trade Ltd.
InventorsKe Du, Minda Zhang
Life of this patent
Estimating the term…
Abstract
A self encryption drive (SED) receives a media encryption key (MEK) from a key management server. The MEK is stored only in volatile memory of the SED. Data is encrypted for storage in a non-volatile storage media of the SED based on the MEK. Further, the MEK is erased in the volatile memory to crypto-erase the SED by deleting all instances of the MEK stored by the SED.
Claims20
A method for crypto-erasing a self-encryption drive (SED) by deleting all instances of a media encryption key (MEK) stored by the self-encryption drive (SED), wherein the self-encryption drive (SED) comprises (i) a volatile memory and (ii) non-volatile storage media, the method comprising:
- receiving the media encryption key (MEK) from a key management server;
- storing the media encryption key (MEK) received from the key management server only in the volatile memory of the self-encryption drive (SED);
- encrypting data for storage in the non-volatile storage media of the self-encryption drive (SED) based on the media encryption key (MEK);
- and
- erasing the media encryption key (MEK) in the volatile memory of the self-encryption drive (SED) to crypto-erase the self-encryption drive (SED).
A non-transitory computer-readable medium storing instructions for crypto-erasing a self-encryption drive (SED) by deleting all instances of a media encryption key (MEK) stored by the self-encryption drive (SED), the instructions when executed by one or more processors, cause the one or more processors to at least:
- receive the media encryption key (MEK) from a key management server;
- store the media encryption key (MEK) received from the key management server only in volatile memory of the self-encryption drive (SED);
- encrypt data for storage in non-volatile storage media of the self-encryption drive (SED) based on the media encryption key (MEK);
- and
- erase the media encryption key (MEK) in the volatile memory of the self-encryption drive (SED) to crypto-erase the self-encryption drive (SED).
A self-encryption drive (SED) arranged to delete all instances of a media encryption key (MEK) stored by the self-encryption drive (SED) to crypto-erase the self-encryption drive (SED), the self-encryption drive (SED) comprising:
- a volatile memory;
- a non-volatile storage media;
- instructions stored in memory of the self-encryption drive (SED), when executed by one or more processors of the self-encryption drive (SED), cause the SED to at least:
- receive the media encryption key (MEK) from a key management server;
- store the media encryption key (MEK) received from the key management server only in the volatile memory of the self-encryption drive (SED);
- encrypt data for storage in the non-volatile storage media of the self-encryption drive (SED) based on the media encryption key (MEK);
- and
- erase the media encryption key (MEK) in the volatile memory of the self-encryption drive (SED) to crypto-erase the self-encryption drive (SED).
Dependencies are inferred from the claim text.