Back to results
US 8,078,903 B1Granted
Automatic load-balancing and seamless failover of data flows in storage media encryption (SME)
AssigneeCisco Technology, Inc.
InventorsAnand Parthasarathy, Manali Chandrakant Holankar, Kalyan Chakravarthy Nidumolu, Chandra Sekhar Kondamuri
Life of this patent
Estimating the term…
Abstract
Methods and apparatus for encrypting data are disclosed. In accordance with one embodiment, data path information identifying a data path is provided to one or more of a plurality of nodes in a cluster of nodes in a network, each of the nodes in the cluster being configured for encryption of data. One of the nodes is selected to be responsible for encryption of data in the data path. The selected one of the nodes is notified of its responsibility for encryption of data associated with the data path, wherein traffic associated with the data path is redirected to the selected one of the nodes.
Claims24
A method, comprising:
- providing data path information to one or more of a plurality of nodes in a cluster of nodes in a network, each of nodes in the cluster being configured for encryption of data, wherein the data path information identifies a data path between a host identifier and a target identifier;
- selecting one of the nodes to be responsible for encryption of data in the data path;
- and
- notifying the selected one of the nodes of its responsibility for encryption of data associated with the data path, wherein traffic associated with the data path is redirected to the selected one of the nodes.
1 more element
An apparatus, comprising:
- a processor;
- and
- a memory, at least one of the processor or the memory being adapted for:
- providing data path information to one or more of a plurality of nodes in a cluster of nodes in a network, the data path information identifying a data path between a host identifier and a target identifier, wherein each of nodes in the cluster being configured for encryption of data;
- selecting one of the nodes to be responsible for encryption of data in the data path;
- and
- notifying the selected one of the nodes of its responsibility for encryption of data associated with the data path, wherein traffic associated with the data path is redirected to the selected one of the nodes.
4 more elements
A method, comprising:
- receiving data path information at a first one of a plurality of nodes in a cluster of nodes in a network, each of the plurality of nodes being configured to encrypt data, the data path information identifying a data path in the network for which data is to be encrypted, the data path being between a host and a target;
- receiving a notification at the first one of the plurality of nodes that the first one of the plurality of nodes has been selected to be responsible for encrypting data associated with the data path;
- and
- encrypting data in the data path in the network by the first one of a plurality of nodes in the cluster of nodes in the network.
1 more element
An apparatus, comprising:
- a processor;
- and
- a memory, at least one of the processor or the memory being adapted for:
- receiving data path information at a first one of a plurality of nodes in a cluster of nodes in a network, each of the plurality of nodes being configured to encrypt data, the data path information identifying a data path in the network for which data is to be encrypted, the data path being between a host and a target;
- receiving a notification at the first one of the plurality of nodes that the first one of the plurality of nodes has been selected to be responsible for encrypting data associated with the data path;
- and
- encrypting data in the data path in the network by the first one of a plurality of nodes in the cluster of nodes in the network.
4 more elements
A method, comprising:
- encrypting data in a data path in a network by a first one of a plurality of nodes in a cluster of nodes in the network, each of the plurality of nodes in the cluster of nodes being configured for encryption of data, wherein the data path is identified by a host identifier and a target identifier, wherein the first one of the plurality of nodes is assigned to perform encryption of data in the data path identified by the host identifier and the target identifier;
- detecting a failure of the first one of the plurality of nodes;
- and
- automatically replacing the first one of the plurality of nodes with a second one of the plurality of nodes such that the second one of the plurality of nodes is assigned to perform encryption of data in the data path identified by the host identifier and the target identifier.
1 more element
Dependencies are inferred from the claim text.