Logical access block processing protocol for transparent secure file storage

A network appliance providing for the secure transport and storage of encrypted file data by network storage resources, said network appliance comprising:

• a) a network file access processor defining the storage of a network file by a network storage resource to include predefined encryption meta-data and a plurality of encrypted file data blocks, said network file access processor supporting a first network file access transaction with a client computer system and a second network file access transaction with said network storage resource, said second network file access transaction including retrieval of said predefined encryption meta-data and further corresponding to a modified said first network file access transaction based on said predefined encryption meta-data;
• and
• b) a network protocol processor, responsive to said network file access processor, operative to selectively convert network packet payload data between a sequence of encrypted data blocks and a defined portion of said network file.

A network file access appliance provided as a gateway within a network infrastructure and implementing a storage protocol to transparently secure file as data stored by network storage resources, said network file access appliance comprising:

• a) a network file transaction processor operative to responsively manage a first network file transaction for returning first network file data to a client computer system and execute a second network file transaction to retrieve second network file data from a network storage resource, wherein said second network file data includes a plurality of encrypted data blocks and file meta-data, including an encryption key identifier, said network file transaction processor being further operative to resolve said encryption key identifier into an encryption key specific to said plurality of encrypted data blocks;
• and
• b) a network file data processor, responsive to said network file transaction processor and including a block decryptor, operative to decrypt said plurality of encrypted data blocks and selectively return said first network file data.