US 2024/0195608 A1 · DATA STORAGE DEVICE BACKUP

Abstract

This disclosure relates to systems, methods, and data storage devices, such as a data storage device comprising a data path and a controller. The data path comprises a data port to transmit data between a host computer system and the data storage device. The data storage device registers with the host computer system as a block data storage device. A non-volatile storage medium stores encrypted user content data. A cryptography engine is connected between the data port and the storage medium and uses cryptographic key data to encrypt and decrypt user content data. The controller is configured to send the encrypted user content data for back-up storage external to the data storage device as encrypted by the cryptographic key data, and communicate with a user device over a communication channel that is different from the data path, to send the cryptographic key data for decryption of the encrypted user content external to the data storage device.

Claims20

Dependent claims

A data storage device comprising a data path and a controller, wherein:

the data path comprises:
a data port configured to transmit data between a host computer system and the data storage device, wherein the data storage device is configured to register with the host computer system as a block data storage device;
a non-volatile storage medium configured to store encrypted user content data;
and
a cryptography engine connected between the data port and the storage medium and configured to use cryptographic key data to encrypt user content data received from the host computer system and to decrypt the encrypted user content data stored on the storage medium in response to a request from the host computer system, and
the controller is configured to:
send the encrypted user content data for back-up storage external to the data storage device as encrypted by the cryptographic key data;
and
communicate with a user device over a communication channel that is different from the data path, to send the cryptographic key data for decryption of the encrypted user content external to the data storage device.

6 more elements

A method for storing data, the method comprising:

storing encrypted user content data on a data storage device;
registering the data storage device with a host computer system as a block data storage device to transmit data between a host computer system and the data storage device;
using cryptographic key data internal to the data storage device to encrypt user content data received from the host computer system and to decrypt the encrypted user content data stored on a storage medium in response to a request from the host computer system;
sending the encrypted user content data from the data storage device to the host computer system via a data path for back-up storage external to the data storage device as encrypted by the cryptographic key data;
and
communicating between the data storage device and a user device over a communication channel that is different from the data path, to send the cryptographic key data from the data storage device to the user device for decryption of the encrypted user content external to the data storage device.

3 more elements

Dependencies are inferred from the claim text.

Data storage device backup

Life of this patent

Data storage device backup

Life of this patent

Abstract

Claims20