STEALTH APPLIANCE BETWEEN A STORAGE CONTROLLER AND A DISK ARRAY

• US 20140189235A1
• Filed: 12/31/2012
• Published: 07/03/2014
• Est. Priority Date: 12/31/2012
• Status: Abandoned Application

• Current Assignee: Unisys Corporation
• Original Assignee: Unisys Corporation
• Inventors: Obligacion, Eric
• Application Number:
  US13/731,217
• Publication Number:
  US 20140189235A1
• Time in Patent Office: Days
• US Class Current: 711/114
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 3/0689 Disk arrays, e.g. RAID, JBOD
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

A stealth appliance may be coupled between a storage controller and a disk array. The stealth appliance may be configured to receive a request from the storage controller encrypted with a first community-of-interest (COI) key, to decrypt the request with the first COI key, to encrypt the request with a second COI key, and to transmit the encrypted request to the disk array.

Claims

1. A system, comprising:

a storage controller on a first secured network;

a disk array on a second secured network; and

a stealth appliance coupled to the storage controller and the disk array.

2. The system of claim 1, in which the stealth appliance is configured:

to receive a request from the storage controller encrypted with a first community-of-interest (COI) key;

to decrypt the request with the first COI key;

to encrypt the request with a second COI key; and

to transmit the encrypted request to the disk array.

3. The system of claim 2, in which the second COI key corresponds to the second secured network and the first COI key corresponds to the first secured network.

4. The system of claim 2, further comprising at least one of an application server and a file server, the server coupled to the storage controller through the first secured network.

5. The system of claim 2, further comprising a remote site coupled to the second secured network.

6. The system of claim 5, in which the remote site comprises a second storage controller, a second disk array, and a second stealth appliance coupled to the second storage controller and the second disk array.

7. The system of claim 2, in which the stealth appliance is further configured:

to receive data from the disk array encrypted with the second COI key;

to decrypt the data with the second COI key;

to encrypt the data with the first COI key; and

to transmit the encrypted data to the storage controller.

8. A method, comprising:

receiving, by a stealth appliance, a request from the storage controller encrypted with a first community-of-interest (COI) key;

decrypting, by the stealth appliance, the request with the first COI key;

encrypting, by the stealth appliance, the request with a second COI key; and

transmitting, by the stealth appliance, the encrypted request to the disk array.

9. The method of claim 8, further comprising:

receiving, by the stealth appliance, data from the disk array encrypted with the second COI key;

decrypting, by the stealth appliance, the data with the second COI key;

encrypting, by the stealth appliance, the data with the first COI key; and

transmitting, by the stealth appliance, the encrypted data to the storage controller.

10. The method of claim 8, in which the storage controller is coupled to a first secured network and the disk array is coupled to a second secured network and the stealth appliance is coupled to the first secured network and the second secured network.

11. The method of claim 10, in which the second COI key corresponds to the second secured. network and the first COI key corresponds to the first secured network.

12. The method of claim 8, in which the request is relayed from at least one of an application server and a file server, the server coupled to the storage controller through the first secured network.

13. An apparatus, comprising:

a memory;

a network interface; and

a processor coupled to the memory and to the network interface, in which the processor is configured;

to receive, through the network interface, a request from the storage controller encrypted with a first community-of-interest (COI) key;

to decrypt, by the processor, the request with the first COI key;

to encrypt, by the processor, the request with a second COI key; and

to transmit, through the network interface, the encrypted request to the disk array.

14. The apparatus of claim 13, in which the apparatus is a stealth appliance.

15. The apparatus of claim 14, in which the storage controller is coupled to a first secured. network and the disk array is coupled to a second secured network and the stealth appliance is coupled to the first secured network and the second secured network.

16. The apparatus of claim 15, in which the second COI key corresponds to the second secured network and the first COI key corresponds to the first secured network.

17. The apparatus of claim 13, in which the processor is further configured:

to receive, through the network interface, data from the disk array encrypted. with the second COI key;

to decrypt, by the processor, the data with the second COI key;

to encrypt, by the processor, the data with the first COI key; and

to transmit, through the network interface, the encrypted data. to the storage controller.

18. The apparatus of claim 13, in which the request is relayed from at least one of an application server and a file server, the server coupled to the storage controller through the first secured network.