Method for data privacy in a fixed content distributed data storage
AssigneeHitachi Data Systems Corporation
InventorDavid M. Shaw
Life of this patent
Estimating the term…
Loading patent…
AssigneeHitachi Data Systems Corporation
InventorDavid M. Shaw
Estimating the term…
A storage cluster of symmetric nodes includes a data privacy scheme that implements key management through secret sharing. The protection scheme preferably is implemented at install time. At install, an encryption key is generated, split, and the constituent pieces written to respective archive nodes. The key is not written to a drive to ensure that it cannot be stolen. Due to the secret sharing, any t of the n nodes must be present before the cluster can mount the drives. To un-share the secret, a process runs before the cluster comes up. It contacts as many nodes as possible to attempt to reach a sufficient t value. Once it does, the process un-shares the secret and mounts the drives locally. Given bidirectional communication, this mount occurs more or less at the same time on all t nodes. Once the drives are mounted, the cluster can continue to boot as normal.
A method for a system having a plurality of servers and storing a plurality of content data and a plurality of metadata, the method comprising the steps of:
A server, in a system having a plurality of servers and storing the plurality of content data and the plurality of metadata, the server comprising:
A system storing a plurality of content data and a plurality of metadata, the system comprising:
Dependencies are inferred from the claim text.