End-To-End Encryption For Storage Systems Using Data Properties
AssigneePure Storage, Inc.
InventorsJONAS R. IRWIN, ETHAN L. MILLER, JOHN D. DAVIS
Life of this patent
Estimating the term…
Abstract
A method of providing end-to-end encryption for data stored in a storage system, including: receiving a request to read encrypted data from a logical volume of a storage system; decrypting the encrypted data using a decryption key associated with at least one property of the storage system; performing at least one of a data operation to reconstitute the data; encrypting the data using an encryption key associated with at least one property of the data to generate new encrypted data; and providing a response to the request that includes the new encrypted data.
Claims20
A method comprising:
- receiving an I/O request that refers to a logical volume of a storage system, wherein different logical volumes resident on the storage system are encrypted using different keys of a plurality of keys;
- and
- in response to the I/O request, processing the I/O request using a key of the plurality of keys, the key being associated with a property of data of the logical volume.
A storage system comprising:
- one or more storage devices;
- and
- a storage controller, the storage controller comprising one or more computer processors that are configured to:
- receiving an I/O request that refers to a logical volume of a storage system, wherein different logical volumes resident on the storage system are encrypted using different keys of a plurality of keys;
- and
- in response to the I/O request, processing the I/O request using a key of the plurality of keys, the key being associated with a property of data of the logical volume.
A non-transitory computer readable storage medium storing instructions, which when executed, cause one or more processor cores to:
- receiving an I/O request that refers to a logical volume of a storage system, wherein different logical volumes resident on the storage system are encrypted using different keys of a plurality of keys;
- and
- in response to the I/O request, processing the I/O request using a key of the plurality of keys, the key being associated with a property of data of the logical volume.
Dependencies are inferred from the claim text.