Storage system, storage control apparatus, and storage control method

• US 8,990,588 B2
• Filed: 09/05/2012
• Issued: 03/24/2015
• Est. Priority Date: 09/30/2011
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Shimmitsu, Masaru
• Primary Examiner(s): SCOTT, RANDY A
• Application Number:
  US13/603,487
• Publication Number:
  US 20130086394A1
• Time in Patent Office: 930 Days
• Field of Search: 713/188, 713/193, 711/169, 711/170
• US Class Current: 713/193
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 3/061 Improving I/O performance
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/0652 Erasing, e.g. deleting, data cleaning, moving of data to a wastebasket
• CPC Class Codes: G06F 3/0689 Disk arrays, e.g. RAID, JBOD

Abstract

A storage system in which a storage control apparatus writes data in each of divided areas defined by division of one or more storage areas in one or more storage devices, after encryption of the data with an encryption key unique to each divided area. When the storage control apparatus receives, from a management apparatus, designation of one or more of the divided areas allocated as one or more physical storage areas for a virtual storage area to be invalidated and an instruction to invalidate data stored in the one or more of the divided areas, the storage control apparatus invalidates one or more encryption keys associated with the designated one or more of the divided areas. In addition, the storage control apparatus may further overwrite at least part of the designated one or more of the divided areas with initialization data for data erasion.

Claims

1. A storage control apparatus comprising:

a physical memory configured to store encryption-key information including encryption keys respectively associated with divided areas defined by division of one or more storage areas in one or more storage devices; and

a physical processor configured to perform a procedure including,

acquiring from the encryption-key information one of the encryption keys associated with one of the divided areas in which data is to be written, encrypting the data to be written, by use of the one of the encryption keys, to generate encrypted data, and writing the encrypted data in the one of the divided areas, and

invalidating one or more of the encryption keys associated with one or more of the divided areas and included in the encryption-key information when the storage control apparatus receives, from a management apparatus, designation of the one or more of the divided areas and an instruction to invalidate data stored in the one or more of the divided areas, and the one or more of the divided areas are allocated as one or more physical storage areas for a virtual storage area to be invalidated.

2. The storage control apparatus according to claim 1, wherein the procedure further includes overwriting at least part of the one or more of the divided areas with initialization data for data erasion.

3. The storage control apparatus according to claim 2, wherein the at least part of the one or more of the divided areas are the one or more of the divided areas excluding part of the one or more of the divided areas in which new data is written after the storage control apparatus receives the instruction.

4. The storage control apparatus according to claim 2, wherein the overwriting is performed at an arbitrary time after the storage control apparatus receives the instruction.

5. The storage control apparatus according to claim 4, wherein the overwriting is performed after the storage control apparatus receives the instruction when the storage control apparatus has no request for access to the storage devices which is received from a host apparatus.

6. The storage control apparatus according to claim 2, wherein the overwriting is performed after the one or more of the encryption keys are invalidated.

7. A storage system comprising:

a management apparatus containing a first physical processor configured to perform a first procedure which includes sending to a storage control apparatus designation of one or more of divided areas and an instruction to invalidate data stored in the one or more of the divided areas, where the divided areas are defined by division of one or more storage areas in one or more storage devices, and the one or more of the divided areas are allocated as one or more physical storage areas for a virtual storage area to be invalidated; and

the storage control apparatus containing,

a physical memory configured to store encryption-key information including encryption keys respectively associated with the divided areas; and

a second physical processor configured to perform a second procedure which includes,

acquiring from the encryption-key information one of the encryption keys associated with one of the divided areas in which data is to be written, encrypting the data to be written, by use of the one of the encryption keys, to generate encrypted data, and writing the encrypted data in the one of the divided areas, and

invalidating one or more of the encryption keys associated with one or more of the divided areas and included in the encryption-key information when the storage control apparatus receives, from the management apparatus, the designation of the one or more of the divided areas and the instruction to invalidate data stored in the one or more of the divided areas, and the one or more of the divided areas are allocated as one or more physical storage areas for a virtual storage area to be invalidated.

8. The storage system according to claim 7, wherein the second procedure further includes overwriting at least part of the one or more of the divided areas with initialization data for data erasion.

9. The storage system according to claim 8, wherein the at least part of the one or more of the divided areas are the one or more of the divided areas excluding part of the one or more of the divided areas in which new data is written after the storage control apparatus receives the instruction.

10. The storage system according to claim 9, wherein the second procedure further includes making the one or more of the divided areas transition to a state in which the one or more of the divided areas can be allocated for another virtual storage area, after the first physical processor sends the instruction to the storage control apparatus.

11. The storage system according to claim 8, wherein the overwriting is performed at an arbitrary time after the storage control apparatus receives the instruction.

12. The storage system according to claim 11, wherein the overwriting is performed after the storage control apparatus receives the instruction when the storage control apparatus has no request for access to the storage devices which is received from a host apparatus.

13. The storage system according to claim 8, wherein the overwriting is performed after the one or more of the encryption keys are invalidated.

14. A storage control method comprising:

performing, by a storage control apparatus, operations of referring to encryption-key information including encryption keys respectively associated with divided areas defined by division of one or more storage areas in one or more storage devices, acquiring from the encryption-key information one of the encryption keys associated with one of the divided areas in which data is to be written, encrypting the data to be written, by use of the one of the encryption keys, to generate encrypted data, and writing the encrypted data in the one of the divided areas;

sending, by a management apparatus, to the storage control apparatus, designation of one or more of the divided areas and an instruction to invalidate data stored in the one or more of the divided areas, where the one or more of the divided areas are allocated as one or more physical storage areas for a virtual storage area to be invalidated; and

invalidating, by the storage control apparatus, one or more of the encryption keys associated with the one or more of the divided areas and included in the encryption-key information, in response to the instruction from the management apparatus.

15. The storage control method according to claim 14, further comprising overwriting, by the storage control apparatus, at least part of the one or more of the divided areas with initialization data for data erasion.

16. The storage control method according to claim 15, wherein the at least part of the one or more of the divided areas are the one or more of the divided areas excluding part of the one or more of the divided areas in which new data is written after the storage control apparatus receives the instruction.

17. The storage control method according to claim 16, further comprising making, by the management apparatus, the one or more of the divided areas transition to a state in which the one or more of the divided areas can be allocated for another virtual storage area, after the management apparatus sends the instruction to the storage control apparatus.

18. The storage control method according to claim 15, wherein the overwriting is performed at an arbitrary time after the storage control apparatus receives the instruction.

19. The storage control method according to claim 18, wherein the overwriting is performed after the storage control apparatus receives the instruction when the storage control apparatus has no request for access to the storage devices which is received from a host apparatus.

20. The storage control method according to claim 15, wherein the overwriting is performed after the one or more of the encryption keys are invalidated.