VIRTUAL DISK MANAGEMENT METHODS

• US 20080065909A1
• Filed: 07/13/2007
• Published: 03/13/2008
• Est. Priority Date: 09/07/2006
• Status: Active Grant

• Current Assignee: VIA Technologies Incorporated (VIA Technologies)
• Original Assignee: VIA Technologies Incorporated (VIA Technologies)
• Inventors: Chen, Rui-Hwa
• Granted Patent: US 7,949,137 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00

Abstract

Virtual disks management methods and systems. First, a file space is set and a first password is set. A first device code is acquired. The file space is encrypted according to the first password and the first device code to obtain an encrypted file. Thereafter, a designation of the encrypted file is received. A second password is received, and a second device code is acquired. It is determined whether the second password conforms to the first password, and whether the second device code conforms to the first device code. If so, the encrypted file is mounted as a virtual disk.

Claims

1. A virtual disk management method, comprising:

setting a file space;

setting a first password;

acquiring a first device code;

encrypting the first device code to obtain a disk root key;

encrypting the first password according to the disk root key to obtain a disk encryption key; and

encrypting the file space according to the disk encryption key to obtain an encrypted file, where the encrypted file is used for a virtual disk.

2. The method of claim 1 further comprising:

receiving a designation of the encrypted file;

receiving a second password;

acquiring a second device code;

decrypting the disk root key to obtain the first device code;

determining whether the second device code conforms to the first device code;

decrypting the disk encryption key according to the disk root key to obtain the first password;

determining whether the second password conforms to the first password; and

if the second device code conforms to the first device code, and the second password conforms to the first password, mounting the encrypted file as the virtual disk.

3. The method of claim 2 further comprising:

obtaining an access control list; and

encrypting the access control list according to the disk root key to obtain a disk specific key.

4. The method of claim 3 further comprising:

obtaining the disk specific key;

decrypting the disk specific key according to the disk root key to obtain the access control list;

retrieving an access authority towards the virtual disk for a specific user according to the access control list; and

providing the specific user to access the virtual disk according to the access authority.

5. The method of claim 1 further comprising constructing the encrypted file as a RAID system, where respective strips in the RAID system correspond to various disk specific keys or a common disk specific key.

6. The method of claim 1 further comprising obtaining the first device code of a storage device or a processing unit.

8. A virtual disk management method, comprising:

setting a file space;

setting a first password;

acquiring a first device code;

encrypting the file space according to the first password and the first device code to obtain an encrypted file;

receiving a designation of the encrypted file;

receiving a second password;

acquiring a second device code;

determining whether the second password conforms to the first password;

determining whether the second device code conforms to the first device code;

if the second device code conforms to the first device code, and the second password conforms to the first password, mounting the encrypted file as a virtual disk.

7. The method of claim 10 wherein the first device code comprises a UUID of the storage device or the processing unit.

9. The method of claim 8 further comprising:

encrypting the first device code to obtain a disk root key;

encrypting the first password according to the disk root key to obtain a disk encryption key; and

encrypting the file space according to the disk encryption key to obtain the encrypted file.

10. The method of claim 9 further comprising:

decrypting the disk root key to obtain the first device code; and

decrypting the disk encryption key according to the disk root key to obtain the first password.

11. The method of claim 9 further comprising:

obtaining an access control list; and

encrypting the access control list according to the disk root key to obtain a disk specific key.

12. The method of claim 11 further comprising:

obtaining the disk specific key;

decrypting the disk specific key according to the disk root key to obtain the access control list;

retrieving an access authority towards the virtual disk for a specific user according to the access control list; and

providing the specific user to access the virtual disk according to the access authority.

13. The method of claim 12 further comprising obtaining a UUID of a storage device or a processing unit as the first device code.

14. A virtual disk management method, comprising:

receiving a designation of an encrypted file;

receiving a second password;

acquiring a second device code;

decrypting a disk root key corresponding to the encrypted file to obtain a first device code;

determining whether the second device code conforms to the first device code;

decrypting a disk encryption key corresponding to the encrypted file according to the disk root key to obtain a first password;

determining whether the second password conforms to the first password; and

if the second device code conforms to the first device code, and the second password conforms to the first password, mounting the encrypted file as a virtual disk.

15. The method of claim 14 further comprising:

encrypting the first device code to obtain the disk root key;

encrypting the first password according to the disk root key to obtain the disk encryption key; and

encrypting a file space according to the disk encryption key to obtain the encrypted file.

16. The method of claim 14 further comprising:

obtaining a disk specific key corresponding to the encrypted file;

decrypting the disk specific key according to the disk root key to obtain an access control list;

retrieving an access authority towards the virtual disk for a specific user according to the access control list; and

providing the specific user to access the virtual disk according to the access authority.

17. The method of claim 16 further comprising encrypting the access control list according to the disk root key to obtain the disk specific key.

18. The method of claim 14 further comprising acquiring the second device code of a storage device or a processing unit.

19. The method of claim 18 wherein the second device code comprises a UUID of the storage device or the processing unit.