VIRTUALIZED VOLUME LEVEL MESSAGING

• US 20180234432A1
• Filed: 02/14/2017
• Published: 08/16/2018
• Est. Priority Date: 02/14/2017
• Status: Active Grant

• Current Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Original Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Inventors: Allo, Christopher N., Weiss, Richard O.
• Granted Patent: US 10,742,661 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

Implementations and methods herein provide a networked storage system including a plurality of physical storage devices configured to store data on a plurality of virtualized volumes, a key store configured to store a plurality of encryption keys, and a secure messaging manager configured to encrypt a message to each of the plurality of virtualized volumes using a different encryption key.

Claims

1. A networked storage system comprising:

a plurality of physical storage devices configured to store data on a plurality of virtualized volumes;

a key store configured to store a plurality of encryption keys; and

a secure messaging manager configured to encrypt a message to each of the plurality of virtualized volumes using a different encryption key.

2. The networked storage system of claim 1 wherein the key store is a local key store configured with the secure messaging manager.

3. The networked storage system of claim 1, wherein the key store is configured remotely from the secure messaging manager.

4. The networked storage system of claim 1 wherein the secure messaging manager is further configured to:

receive a request from a client for communication with one of the plurality of virtualized volumes; and

determine an encryption key used to encrypt data to the one of the plurality of virtualized volumes.

5. The networked storage system of claim 4 wherein the secure messaging manager is further configured to request the encryption key used to encrypt data to the one of the plurality of virtualized volumes from the key store and to encrypt the message to the one of the plurality of virtualized volumes with the encryption key.

6. A networked storage system, comprising:

a plurality of physical storage devices configured to store data on a plurality of virtualized volumes;

a key store configured to store a plurality of encryption keys; and

a secure messaging manager configured to encrypt a message to each of the plurality of virtualized volumes using a different encryption key, wherein the secure messaging manager is further configured to receive the encryption key from a client.

7. The networked storage system of claim 6, wherein each of the plurality of virtualized volumes is configured to store data on more than one of the plurality of physical storage devices.

8. The networked storage system of claim 6, further comprising a network controller configured to store a mapping between the plurality of virtualized volumes to the plurality of encryption keys.

9. The networked storage system of claim 6, wherein the plurality of encryption keys of the key store is a plurality of public keys and each of the plurality of virtualized volumes has a private key corresponding to the related one of the plurality of public keys.

10. The networked storage system of claim 9 wherein the secure messaging manager is further configured to encrypt the message to one of the plurality of virtualized volumes using the one of the plurality of public keys related to the one of the plurality of virtualized volumes.

11. The networked storage system pf claim 6, wherein the secure messaging manager is configured to establish a handshake with one or more of a plurality of drives using pre-shared keys (PSKs).

12. The networked storage system pf claim 6, wherein the secure messaging manager is configured to establish a handshake with one or more of a plurality of drives using certificates (CERTs).

13. A networked data storage system, comprising:

a plurality of virtualized volumes, messaging with each of the plurality of virtualized volumes being encrypted using a different key.

14. The networked data storage system of claim 13, further comprising a secure messaging manager configured to receive a request from a client to store data to a network resource comprising a plurality of virtualized volumes and to determine an identity of a target virtualized volume.

15. The networked data storage system of claim 14, further comprising a key store configured to store a plurality of encryption keys, each of the plurality of encryption keys relating to messaging with one of the plurality of virtualized volumes.

16. The networked data storage system of claim 14, wherein the key store is a local key store configured with the secure messaging manager.

17. The networked data storage system of claim 14, wherein the key store is configured remotely from the secure messaging manager.

18. The networked data storage system of claim 14, wherein each of the plurality of virtualized volumes is configured to store data on a plurality of physical storage devices.

19. The networked data storage system of claim 18, wherein the secure messaging manager is further configured to establish a handshake with each of the plurality of physical storage drives using PSKs.

20. The networked data storage system of claim 18, wherein the secure messaging manager is further configured to establish a handshake with each of the plurality of physical storage drives using CERTs.