Code conversion apparatus, code conversion method, and computer product

A method for encrypting and decrypting data stored in a disk drive in a storage that manages the data, the method comprising:

• dividing the encryption buffer into a local area for storing therein unencrypted data as first local data and a mirror area for storing therein unencrypted data as first mirror data corresponding to second local data stored in a different encryption buffer;
• encrypted-data storing including storing a first encrypted data present in the disk drive, in a code buffer in the storage;
• unencrypted-data storing including storing first unencrypted data present in the disk drive, in the encryption buffer in the storage;
• encrypting the first unencrypted data present in the encryption buffer to predetermined encrypted data;
• decrypting the first encrypted data present in the code buffer to second unencrypted data;
• re-encrypting including decrypting the first encrypted data present in the code buffer to third unencrypted data and encrypting the third unencrypted data to second encrypted data different from the first encrypted data;
• monitoring progress of data including monitoring whether data is at least one of being encrypted and decrypted at any one of the encrypting, decrypting, and the re-encrypting;
• and
• read/write controlling including controlling read/write of data based on a read/write request based on the progress monitored at the monitoring, upon reception of the read/write request for requesting the disk drive to read and write data when the data is being encrypted and decrypted at any one of the encrypting, decrypting, and the re-encrypting, wherein
• the read/write controlling includes, upon reception of the read/write request for requesting read of target data including data currently being decrypted, waiting completion of decryption of the data, dividing the target data into fourth encrypted data and sixth unencrypted data after the decryption of the data is completed, reading the fourth encrypted data and the sixth unencrypted data, decrypting the fourth encrypted data to seventh unencrypted data, combining the sixth unencrypted data and the seventh unencrypted data, and controlling reading of the combined data,
• the read/write controlling includes issuing an instruction to write the first local data in the local area in a first encryption buffer and writing second mirror data corresponding to the first local data in a mirror area of a second encryption buffer,
• the encrypting includes, when a failure occurs in the first encryption buffer and the second mirror data corresponding to the first local data stored in the first encryption buffer is stored in the mirror area of the second encryption buffer, decrypting the second mirror data to the predetermined encrypted data and writing the predetermined encrypted data to the disk drive,
• the decrypting includes, when a failure occurs in the first encryption buffer and the second mirror data corresponding to the first local data stored in the first encryption buffer is stored in the mirror area of the second encryption buffer, writing the second mirror data to the disk drive, and
• the re-encrypting includes, when a failure occurs in the first encryption buffer and the second mirror data corresponding to the first local data stored in the first encryption buffer is stored in the mirror area of the second encryption buffer, encrypting the second mirror data to different encrypted data and writing the different encrypted data to the disk drive.

A storage comprising:

• a disk drive that stores therein data;
• and
• a code conversion apparatus that encrypts and decrypts the data stored in the disk drive, wherein the code conversion apparatus includes
• an encrypted-data storage unit that stores, in a code buffer in the storage, first encrypted data present in the disk drive;
• an unencrypted-data storage unit that stores, in an encryption buffer in the storage, first unencrypted data present in the disk drive, the encryption buffer being divided into a local area for storing therein unencrypted data as first local data and a mirror area for storing therein unencrypted data as first mirror data corresponding to second local data stored in a different encryption buffer;
• an encrypting unit that encrypts the first unencrypted data present in the encryption buffer to predetermined encrypted data;
• a decrypting unit that decrypts the first encrypted data present in the code buffer to second unencrypted data;
• a re-encrypting unit that decrypts the first encrypted data present in the code buffer to third unencrypted data and encrypts the third unencrypted data to second encrypted data different from the first encrypted data;
• a monitoring unit that monitors a progress of data including monitoring whether data is at least one of being encrypted and decrypted by any one of the encrypting unit, the decrypting unit, and the re-encrypting unit;
• and
• a read/write controlling unit that includes controlling read/write of data based on a read/write request based on the progress monitored by the monitoring unit, upon reception of the read/write request for requesting the disk drive to read and write data when the data is being encrypted and decrypted by any one of the encrypting unit, the decrypting unit, and the re-encrypting unit, wherein
• the read/write controlling unit includes, upon reception of the read/write request for requesting read of target data including data currently being decrypted, waiting completion of decryption of the data, dividing the target data into fourth encrypted data and sixth unencrypted data after the decryption of the data is completed, reading the fourth encrypted data and the sixth unencrypted data, decrypting the fourth encrypted data to seventh unencrypted data, combining the sixth unencrypted data and the seventh unencrypted data, and controlling reading of the combined data,
• the read/write controlling unit issues an instruction to write the first local data in the local area in a first encryption buffer and writes second mirror data corresponding to the first local data in a mirror area of a second encryption buffer,
• the encrypting unit, when a failure occurs in the first encryption buffer and the second mirror data corresponding to the first local data stored in the first encryption buffer is stored in the mirror area of the second encryption buffer, decrypts the second mirror data to the predetermined encrypted data and writes the predetermined encrypted data to the disk drive,
• the decrypting unit, when a failure occurs in the first encryption buffer and the second mirror data corresponding to the first local data stored in the first encryption buffer is stored in the mirror area of the second encryption buffer, writes the second mirror data to the disk drive, and
• the re-encrypting unit, when a failure occurs in the first encryption buffer and the second mirror data corresponding to the first local data stored in the first encryption buffer is stored in the mirror area of the second encryption buffer, encrypts the second mirror data to different encrypted data and writes the different encrypted data to the disk drive.