Sizing volatile memory cache based on flash-based cache usage
    2.
    发明授权
    Sizing volatile memory cache based on flash-based cache usage 有权
    根据基于闪存的缓存使用情况调整易失性存储器缓存

    公开(公告)号:US09043533B1

    公开(公告)日:2015-05-26

    申请号:US12826185

    申请日:2010-06-29

    IPC分类号: G06F12/00 G06F12/08 G06F12/02

    摘要: A method is used in sizing volatile memory (VM) cache based on flash-based cache usage. A user selection for a flash-based cache is received. Based on the selection, configuration and sizing factors are provided, by a flash based cache driver, to VM cache size determination logic. Based on the configuration and sizing factors and a sizing formula and rules, a requested VM cache size is produced by the VM cache size determination logic. Based on the requested VM cache size, the VM cache is caused, via VM cache resizing logic, to be resized to the requested VM cache size.

    摘要翻译: 基于基于闪存的高速缓存使用的方法用于调整易失性存储器(VM)缓存的大小。 接收基于闪存的高速缓存的用户选择。 基于闪存的高速缓存驱动器将选择,配置和尺寸因子提供给VM高速缓存大小确定逻辑。 基于配置和尺寸因子以及尺寸公式和规则,VM缓存大小确定逻辑产生请求的VM缓存大小。 基于所请求的VM缓存大小,通过VM缓存调整大小逻辑引起VM缓存大小被调整为请求的VM缓存大小。

    Encryption key recovery in the event of storage management failure
    3.
    发明授权
    Encryption key recovery in the event of storage management failure 有权
    存储管理失败时加密密钥恢复

    公开(公告)号:US08588425B1

    公开(公告)日:2013-11-19

    申请号:US12043780

    申请日:2008-03-06

    摘要: A data processing system stores encrypted data. Object identifiers are assigned to storage objects, and data encryption keys are assigned to the storage objects. When performing an operation upon a storage object, data encryption key failure may occur due to a corrupt or incorrect key. In this case, a copy of the data encryption key is fetched from a key server. It is possible for the association of the object identifiers with the data encryption keys to become lost or confused, so that the key server may fail to provide the correct key for a specified object identifier. Therefore, an absolute key identifier that is unique across the key server namespace also is stored in association with the object identifier in the storage system and in the key store of the key server, and the absolute key identifier is used as a failsafe for recovery of encrypted data.

    摘要翻译: 数据处理系统存储加密数据。 将对象标识符分配给存储对象,并将数据加密密钥分配给存储对象。 当对存储对象执行操作时,由于损坏或不正确的键,可能会发生数据加密密钥失败。 在这种情况下,从密钥服务器取出数据加密密钥的副本。 对象标识符与数据加密密钥的关联可能会丢失或混淆,从而密钥服务器可能无法为指定的对象标识符提供正确的密钥。 因此,密钥服务器命名空间中唯一的绝对密钥标识符也与存储系统中的对象标识符和密钥服务器的密钥存储器相关联地存储,并且绝对密钥标识符被用作恢复 加密数据。

    Methodology for coordinating centralized key management and encryption keys cached through proxied elements
    4.
    发明授权
    Methodology for coordinating centralized key management and encryption keys cached through proxied elements 有权
    协调通过代理元素缓存的集中式密钥管理和加密密钥的方法

    公开(公告)号:US08170213B1

    公开(公告)日:2012-05-01

    申请号:US11965253

    申请日:2007-12-27

    IPC分类号: H04L9/00

    摘要: A method is provided for effectively managing encryption keys. A storage processor requests a key associated with a particular object ID associated with a particular device address range from a key server. The key server provides a unique key associated with the object ID. Old keys may be deleted either upon a determination by the storage processor that the key is no longer needed, or upon a signal from the key server indicating that the key is to be deleted. In either case, the storage processor deletes the key from all locations in memory and sends a confirmation signal to the key server. The key server then lists the key as disabled for possible future re-use. Embodiments are also directed to apparatus for use in practicing the method.

    摘要翻译: 提供了一种有效管理加密密钥的方法。 存储处理器从密钥服务器请求与特定设备地址范围相关联的特定对象ID相关联的密钥。 密钥服务器提供与对象ID相关联的唯一密钥。 老密钥可以在存储处理器确定不再需要密钥或者从密钥服务器发出的指示该密钥被删除的信号时被删除。 在任一情况下,存储处理器从存储器中的所有位置删除密钥,并向密钥服务器发送确认信号。 然后,密钥服务器将密钥列为禁用,以备将来重新使用。 实施例还涉及用于实施该方法的装置。

    Disk drive packaging enclosure
    5.
    发明授权
    Disk drive packaging enclosure 有权
    磁盘驱动器包装外壳

    公开(公告)号:US07600070B1

    公开(公告)日:2009-10-06

    申请号:US11277958

    申请日:2006-03-30

    申请人: Thomas E. Linnell

    发明人: Thomas E. Linnell

    IPC分类号: G06F13/00

    摘要: An arrangement of a plurality of disk drives having a interconnect control card and a plurality of disk drive carriers. The interconnect control card includes a plurality of serial interconnects; each one of the serial interconnects comprising a plurality of serially connected switches. Each one of such disk drive carriers has thereon a different portion of the plurality disk drives. The disk drives on each one of the carriers are connected to the switches in a different one of the plurality of serial interconnects. The disk drives on different ones of the carriers provide a RAID group.

    摘要翻译: 具有互连控制卡和多个磁盘驱动器载体的多个磁盘驱动器的布置。 互连控制卡包括多个串行互连; 每个串行互连包括多个串行连接的开关。 这些盘驱动器托架中的每一个在其上具有多个盘驱动器的不同部分。 每个载体上的磁盘驱动器连接到多个串行互连中不同的一个中的开关。 不同运营商的磁盘驱动器提供RAID组。

    Techniques for protecting data using an electronic encryption endpoint device
    8.
    发明授权
    Techniques for protecting data using an electronic encryption endpoint device 有权
    使用电子加密端点设备保护数据的技术

    公开(公告)号:US08010810B1

    公开(公告)日:2011-08-30

    申请号:US11965244

    申请日:2007-12-27

    IPC分类号: G06F11/30 H04L9/08 H04L9/00

    摘要: An electronic encryption endpoint device includes a management interface, a storage device interface and a controller. The management interface is capable of operating as a control interface (e.g., connecting to an array controller). The storage device interface is arranged to communicate with a set of storage devices. The controller is arranged to (i) receive a key encryption key through the management interface, (ii) decrypt a portion of a key table entry of a key table using the key encryption key to extract a data encryption key from the portion of the key table entry, the data encryption key being initially encrypted within the portion of the key table entry prior to decrypting the portion of the key table entry, and (iii) encrypt data using the data encryption key and store the encrypted data in the set of storage devices through the storage device interface.

    摘要翻译: 电子加密端点设备包括管理接口,存储设备接口和控制器。 管理接口能够作为控制接口操作(例如,连接到阵列控制器)。 存储设备接口被布置为与一组存储设备通信。 控制器被配置为(i)通过管理接口接收密钥加密密钥,(ii)使用密钥加密密钥对密钥表的密钥表条目的一部分进行解密,以从密钥的部分提取数据加密密钥 在密钥表项的部分解密之前,数据加密密钥最初在密钥表项的部分内被加密,以及(iii)使用数据加密密钥对数据进行加密,并将加密的数据存储在该组存储器中 设备通过存储设备接口。

    Disk drive management system
    9.
    发明授权
    Disk drive management system 有权
    磁盘驱动器管理系统

    公开(公告)号:US07685463B1

    公开(公告)日:2010-03-23

    申请号:US11474192

    申请日:2006-06-23

    申请人: Thomas E. Linnell

    发明人: Thomas E. Linnell

    IPC分类号: G06F11/00

    摘要: A disk drive management system includes a data storage device including an array of disk drives and a host computer for controlling the operation of the data storage device. The array of disk drives includes an operational drive pool including a number of online disk drives having data written to and read from by the host computer; a spares drive pool including a number of disk drives that are configured to be included in the operational drive group, but are offline while in the spares group; and a maintenance drive pool including a maintenance manager for testing faulty disk drives from the operational drive pool. When a faulty drive is transitioned from the operational drive pool upon the occurrence of a particular error, a disk drive from the spares drive pool is transitioned to the operational drive pool to take the place of the faulty drive.

    摘要翻译: 磁盘驱动器管理系统包括包括磁盘驱动器阵列的数据存储装置和用于控制数据存储装置的操作的主计算机。 磁盘驱动器阵列包括一个可操作的驱动器池,其包括许多在线磁盘驱动器,其具有由主机计算机写入和读取的数据; 一个备用驱动器池,包括配置为包含在操作驱动器组中但在备用组中脱机的多个磁盘驱动器; 以及一个维护驱动器池,其中包括维护管理器,用于从操作驱动器池测试故障磁盘驱动器。 当故障驱动器在发生特定错误时从操作驱动器池过渡时,来自备件驱动器池的磁盘驱动器将转换到操作驱动器池以取代故障驱动器。

    Redundant array of encrypting disks
    10.
    发明授权
    Redundant array of encrypting disks 有权
    冗余的加密磁盘阵列

    公开(公告)号:US08799681B1

    公开(公告)日:2014-08-05

    申请号:US12043863

    申请日:2008-03-06

    摘要: By placing an encryption function below a RAID function and requiring independence of encryption functionality along the same boundaries of data member independence of the RAID function, failures of the encryption and key management for individual encryption functions can be recovered with the same data rebuild mechanism as the RAID function. For example, in a RAID set of disk drives, each data partition and each parity partition has a respective data encryption key for storing encrypted data or encrypted parity in the partition, and a LUN or logical volume is mapped to a stripe of data partitions and an associated parity partition across the RAID set so that the data rebuild mechanism of the RAID function may recover from a loss of a single data encryption key without compromising security of the LUN or logical volume.

    摘要翻译: 通过将加密功能放在RAID功能下方,并且要求独立于数据成员独立于RAID功能的同一边界上的加密功能,可以使用相同的数据重建机制恢复单个加密功能的加密和密钥管理失败, RAID功能。 例如,在RAID磁盘驱动器集中,每个数据分区和每个奇偶校验分区具有用于在分区中存储加密数据或加密奇偶校验的相应数据加密密钥,并且将LUN或逻辑卷映射到数据分区条带, 跨RAID组的相关奇偶校验分区,使得RAID功能的数据重建机制可以从丢失单个数据加密密钥中恢复,而不会影响LUN或逻辑卷的安全性。