Back to results
US 8,370,648 B1Granted
Writing and reading encrypted data using time-based encryption keys
AssigneeEMC International Company
InventorAssaf Natanzon
Life of this patent
Estimating the term…
Abstract
In one aspect, a method to manage encrypted data includes configuring a first portion of a storage medium to store encrypted data. The encrypted data is encrypted using a time-based encryption key. The method also includes configuring a second portion of the storage medium to include metadata identifying the time-based encryption key and storing the time-based encryption key in a location other than the storage medium.
Claims11
A method to manage encrypted data, comprising:
- configuring a first portion of a computer storage medium to store encrypted data, the encrypted data being encrypted using a time-based encryption key;
- configuring a second portion of the storage medium to include metadata identifying the time-based encryption key;
- storing the time-based encryption key in a location separately from the encrypted data and the metadata other than the storage medium, the location being at least one of a cache and a server;
- receiving a request to store data as encrypted data;
- encrypting the data using the time-based encryption key;
- storing the encrypted data in the first portion of the storage medium;
- generating the metadata to identify the time-based encryption key;
- storing the metadata in the second portion of the storage medium;
- receiving a request to read the encrypted data;
- accessing the metadata to determine the time-based encryption key;
- decrypting the encrypted data using the time-based encryption key;
- receiving a request to delete the encrypted data;
- determining metadata associated with the encrypted data;
- determining a time-based encryption key associated with the metadata associated with the encrypted data;
- and
- deleting the time-based encryption key associated with the metadata associated with the encrypted data to satisfy the request to delete the encrypted data,
- wherein the storage medium comprises one of a logical unit, a disk drive and a track storage.
14 more elements
An article comprising:
- a non-transitory machine-readable medium that stores executable instructions to manage encrypted data, the instructions causing a machine to:
- configure a first portion of a storage medium to store encrypted data, the encrypted data being encrypted using a time-based encryption key;
- configure a second portion of the storage medium to include metadata identifying the time-based encryption key;
- and
- store the time-based encryption key separately from the encrypted data and the metadata in a location other than the storage medium, the location being at least one of a cache and a server;
- receive a request to store data as encrypted data;
- encrypt the data using the time-based encryption key;
- store the encrypted data in the first portion of the storage medium;
- generate the metadata to identify the time-based encryption key;
- store the metadata in the second portion of the storage medium;
- receive a request to read the encrypted data;
- access the metadata to determine the time-based encryption key;
- decrypt the encrypted data using the time-based encryption key;
- receive a request to delete the encrypted data;
- determine metadata associated with the encrypted data;
- determine a time-based encryption key associated with the metadata associated with the encrypted data;
- and
- delete the time-based encryption key associated with the metadata associated with the encrypted data to satisfy the request to delete the encrypted data,
- wherein the storage medium comprises one of a logical unit, a disk drive and a track storage.
16 more elements
An apparatus to manage encrypted data, comprising:
- circuitry to:
- configure a first portion of a storage medium to store encrypted data, the encrypted data being encrypted using a time-based encryption key;
- configure a second portion of the storage medium to include metadata identifying the time-based encryption key;
- and
- store the time-based encryption key separately from the encrypted data and the metadata in a location other than the storage medium, the location being at least one of a cache and a server;
- receive a request to store data as encrypted data;
- encrypt the data using the time-based encryption key;
- store the encrypted data in the first portion of the storage medium;
- generate the metadata to identify the time-based encryption key;
- store the metadata in the second portion of the storage medium;
- receive a request to read the encrypted data;
- access the metadata to determine the time-based encryption key;
- decrypt the encrypted data using the time-based encryption key;
- receive a request to delete the encrypted data;
- determine metadata associated with the encrypted data;
- determine a time-based encryption key associated with the metadata associated with the encrypted data;
- and
- delete the time-based encryption key associated with the metadata associated with the encrypted data to satisfy the request to delete the encrypted data,
- wherein the storage medium comprises one of a logical unit, a disk drive and a track storage.
16 more elements
Dependencies are inferred from the claim text.