System and method for parallel compression of a single data stream

• US 7,995,759 B1
• Filed: 09/28/2006
• Issued: 08/09/2011
• Est. Priority Date: 09/28/2006
• Status: Active Grant

• Current Assignee: NetApp, Inc.
• Original Assignee: NetApp, Inc.
• Inventors: Tolfmans, Joakim Bengt Lennart
• Primary Examiner(s): Arani; Taghi T
• Assistant Examiner(s): HOLMES, ANGELA R
• Application Number:
  US11/528,786
• Time in Patent Office: 1,776 Days
• Field of Search: 380/269, 380/217, 380/232, 382/232, 707802-803, 707808-809, 711/100
• US Class Current: 380/269
• CPC Class Codes: H04L 2209/125 Parallelization or pipelining, e.g. for accelerating processing of cryptographic operations
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 9/065 Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3

Abstract

A system and method provide parallel compression of a single data stream is provided. A data stream entering a storage encryption processor is split by a splitting stage into a plurality of substantially equal segments. Each of the segments is stored in one of a first set of memories in a round robin fashion. Each memory has an associated compression core that reads the segments associated with each memory and compresses the data before storing the compressed segments in a second set of memories. A merging stage reads the compressed segments from the second set of memories and creates a single compressed data stream.

Claims

1. A method for compressing a single data stream, the method comprising:

receiving the single data stream and an associated encryption key;

splitting, by a storage encryption processor of a security appliance, the single data stream into a plurality of segments, wherein the storage encryption processor of the security appliance performs at least one of encrypting data and decrypting the data;

storing, by the storage encryption processor of the security appliance, the plurality of segments in a first set of memories;

reading, by the storage encryption processor of the security appliance, the plurality of segments from the first set of memories to compress the plurality of segments in parallel within the security appliance to achieve parallel compression of the single data stream;

storing, by the storage encryption processor of the security appliance, the plurality of compressed segments in a second set of memories;

merging, by the storage encryption processor of the security appliance, the plurality of compressed segments from the second set of memories into a single compressed data stream; and

in response to merging the plurality of compressed segments into the single compressed data stream by the storage encryption processor, encrypting, by the storage encryption processor of the security appliance, the single compressed data stream utilizing the associated received encryption key.

2. The method of claim 1 further comprising marking an end of each of the plurality of segments before storing the plurality of segments in the first set of memories.

3. The method of claim 1 further comprising marking each of the plurality of compressed segments before storing the plurality of compressed segments in the second set of memories.

4. The method of claim 1 wherein the plurality of segments are stored in the first set of memories using a round robin technique.

5. The method of claim 1 wherein the plurality of compressed segments are merged from the second set of memories into the single compressed data stream using a round robin technique.

6. The method of claim 1 wherein the plurality of segments are substantially equal in length.

7. A system adapted to compress a single data stream within a security appliance, the system comprising:

the security appliance to receive the single data stream and an associated encryption key, wherein the security appliance performs at least one of encrypting data and decrypting data;

a splitting stage of the security appliance configured to split the single data stream into a plurality of segments and further configured to store the plurality of segments in a first set of memories;

a plurality of compression cores of the security appliance, each compression core associated with one of the first set of memories, each compression core configured to read one or more of the plurality of segments from the associated memory and further configured to compress the plurality of segments in parallel within the security appliance to achieve parallel compression of the single data stream before storing the plurality of compressed segments in a second set of memories;

is a merging stage of the security appliance configured to merge the plurality of compressed segments into a single compressed data stream; and

an encryption stage of the security appliance configured to utilize the encryption key to encrypt the single compressed data stream in response to the plurality of compressed segments being merged into the single compressed data stream.

8. The system of claim 7 wherein the plurality of segments are substantially equal in length.

9. The system of claim 7 wherein the splitting stage is further configured to store the plurality of segments in the first set of memories in a round robin order.

10. The system of claim 7 wherein the splitting stage is further configured to mark an end of each of the plurality of segments.

11. The system of claim 10 wherein the splitting stage is further configured to assert one or more control bits in the first set of memories to mark the end of each of the plurality of segments.

12. The system of claim 7 wherein the compression cores are further configured to mark an end of each of the plurality of compressed segments.

13. The system of claim 12 wherein the compression cores are further configured to assert one or more control bits in the second set of memories to mark the end of each of the plurality of compressed segments.

14. A system configured to compress a single data stream, the system comprising:

means for receiving the single data stream and an associated encryption key;

means for splitting, upon entering a storage encryption processor of a security appliance, the single data stream into a plurality of segments, wherein the storage encryption process of the security appliance performs at least one of encrypting data and decrypting data;

means for storing, while at the storage encryption processor of the security appliance, the plurality of segments;

means for reading, while at the storage encryption processor of the security appliance, the plurality of segments to compress the plurality of segments in parallel within the security appliance to achieve parallel compression of the single data stream;

means for storing, while at the storage encryption processor of the security appliance, the plurality of compressed segments;

means for merging, while at the storage encryption processor of the security appliance, the plurality of compressed segments into a single compressed data stream; and

means for encrypting, before exiting the storage encryption processor of the security appliance, the single compressed data stream using the received encryption key in response to merging the plurality of compressed segments into the single compressed data stream.

15. The system of claim 14 further comprising means for marking an end of each of the plurality of segments before it is stored.

16. The system of claim 14 further comprising means for marking each of the plurality of compressed segments.

17. The system of claim 15 wherein the means for storing stores the plurality of segments using a round robin technique.