Multi-tenancy architecture
AssigneeSecturion Systems, Inc.
InventorRICHARD J. TAKAHASHI
Life of this patent
Estimating the term…
Abstract
A system includes a security device, configured for cryptographic processing, coupled to receive incoming data from a plurality of data sources (e.g., data from different customers), wherein the incoming data includes first data from a first data source; a controller (e.g., an external key manager) configured to select a first set of keys from a plurality of key sets, each of the key sets corresponding to one of the plurality of data sources, wherein the first set of keys is used by the security device to encrypt the first data; and a common encrypted data storage, coupled to receive the encrypted first data from the security device.
Claims20
A system, comprising:
- at least one processor, ASIC, or field-programmable gate array configured to:
- receive a first data packet from a first data source;
- send the first data packet to storage after the first data packet is encrypted;
- and
- detect a tag of the first data packet that identifies the first data source;
- and
- a controller configured to select a first set of keys based on the tag, the first set of keys used to encrypt the first data packet.
A system comprising:
- at least one processor, ASIC, or field-programmable gate array configured to:
- receive a first data packet from a first data source, the first data packet including a tag associated with the first data source;
- encrypt the first data packet;
- send, over a network, the encrypted first data packet to storage;
- read, over the network, the first data packet from the storage;
- after reading the first data packet from the storage, decrypt the first data packet;
- and
- after decrypting the first data packet, send the first data packet to the first data source;
- and
- at least one switch or router configured to:
- when reading the first data packet from the storage, detect the tag;
- and
- select a first cryptographic engine for decrypting the first data packet based on the detected tag.
A system comprising:
- at least one memory configured to store a key;
- and
- at least one processor, ASIC, or field-programmable gate array configured to:
- receive a first data packet from a first source;
- in response to receiving the first data packet, determine an association of the first data packet with the first source;
- select, based on the association of the first data packet with the first source, a first processor;
- encrypt, by the selected first processor using the key, the first data packet;
- and
- send the encrypted first data packet to storage.
Dependencies are inferred from the claim text.