CLONING STORAGE DEVICES THROUGH SECURE COMMUNICATIONS LINKS

• US 20130173906A1
• Filed: 12/29/2011
• Published: 07/04/2013
• Est. Priority Date: 12/29/2011
• Status: Abandoned Application

• Current Assignee: Unisys Corporation
• Original Assignee: Unisys Corporation
• Inventors: Obligacion, Eric T.
• Application Number:
  US13/339,464
• Publication Number:
  US 20130173906A1
• Time in Patent Office: Days
• US Class Current: 713/151
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

New storage devices located remote to old storage devices may be cloned through a secure data communications link established with a secure boot device located in the storage device. The secure communications link cryptographically splits data and encrypts the data for transmission over unsecure public network through the secure communications link. The cloning process may be completed between the new storage device and the old storage device with little or no involvement from other devices.

Claims

1. A method, comprising:

establishing a secure communications link between a first storage device and a second storage device;

generating a data stream of data stored on the first storage device;

splitting the data stream cryptographically; and

transmitting the cryptographically split data.

2. The method of claim 1, in which the step of generating the data stream comprises generating a data stream according to a network data management protocol (NDMP).

3. The method of claim 1, in which the step of splitting the data stream cryptographically comprises encrypting the data stream according to an encryption key.

4. The method of claim 1, in which the step of transmitting the cryptographically split data comprises transmitting the data through a plurality of data paths.

5. The method of claim 1, in which the data stream is generated in response to a request to clone the first storage device to a second storage device.

6. The method of claim 5, in which the second storage device is located remote to the first storage device.

7. The method of claim 5, in which the first storage device is a network attached storage (NAS) device.

8. A computer program product, comprising:

a non-transitory computer readable medium comprising;

code to establish a secure communications link between a first storage device and a second storage device;

code to generate a data stream of data stored on the first storage device;

code to split the data stream cryptographically; and

code to transmit the cryptographically split data.

9. The computer program product of claim 8, in which the medium further comprises code to generate a data stream according to a network data management protocol (NDMP).

10. The computer program product of claim 8, in which the medium further comprises code to encrypt the data stream according to an encryption key.

11. The computer program product of claim 8, in which the medium further comprise code to transmit the data through a plurality of data paths.

12. The computer program product of claim 8, in which the medium further comprises code to receive a request to clone the first storage device to a second storage device.

13. The computer program product of claim 12, in which the second storage device is located remote to the first storage device.

14. An apparatus, comprising:

a processor;

a memory connected to the processor;

a secure boot device connected to the processor; and

a network adapter connected to the processor,

in which the processor is configured;

to establish a secure communications link between a first storage device and a second storage device with the secure boot device;

to generate a data stream of data stored on the first storage device;

to split the data stream cryptographically; and

to transmit the cryptographically split data through the network adapter.

15. The apparatus of claim 14, in which the processor is further configured to generate a data stream according to a network data management protocol (NDMP).

16. The apparatus of claim 14, in which the processor is further configured to encrypt the data stream according to an encryption key stored in the secure boot device.

17. The apparatus of claim 14, in which the processor is further configured to transmit the data through a plurality of data paths with the network adapter.

18. The apparatus of claim 14, in which the processor is further configured to receive a request to clone the first storage device to a second storage device.

19. The apparatus of claim 18, in which the second storage device is located remote to the first storage device.

20. The apparatus of claim 19, in which the apparatus is a network attached storage (NAS) device, and the secure boot device is integrated into the NAS device.