公开(公告)号：US20160034719A1

公开(公告)日：2016-02-04

申请号：US14426406

申请日：2013-12-12

Applicant: HITACHI, LTD.

Inventor： Jin CHOI ,  Shinichi NAKAYAMA ,  Tetsuya SHIROGANE

IPC: G06F21/78 ,  H04L9/08 ,  G06F12/14

CPC classification number: G06F21/78 ,  G06F3/067 ,  G06F11/076 ,  G06F12/1408 ,  G06F21/6218 ,  G06F21/64 ,  G06F21/79 ,  G06F2211/1028 ,  G06F2212/1052 ,  G06F2212/402 ,  G06F2221/2107 ,  G11B20/00086 ,  G11B20/0021 ,  H04L9/0894

Abstract: The storage system according to the present invention has a function to encrypt write data from the host and store the same in a storage media. Further, validation information of write data is added to the write data during storage thereof, and the data having the validation information added thereto is encrypted and stored in the storage media. When starting the storage system or restoring the encryption key information, the encrypted data stored in the storage media is read from the disk and decrypted prior to receiving a data access request from the host, and validation of data is performed using the validation information added to the decrypted data, so as to determine whether the encryption key stored in a storage controller is valid or not.

Abstract translation: 根据本发明的存储系统具有从主机加密写入数据并将其存储在存储介质中的功能。 此外，在写入数据的存储期间将写入数据的验证信息添加到写入数据，并且将其中添加有验证信息的数据加密并存储在存储介质中。 当启动存储系统或恢复加密密钥信息时，在从主机接收到数据访问请求之前，从磁盘读取存储在存储介质中的加密数据并进行解密，并且使用添加到 解密的数据，以便确定存储在存储控制器中的加密密钥是否有效。

公开(公告)号：US20190073159A1

公开(公告)日：2019-03-07

申请号：US16081254

申请日：2016-09-27

Applicant: HITACHI, LTD.

Inventor： Takao YOSHIKAWA ,  Yusuke NONAKA ,  Jin CHOI ,  Masahide KAWARASAKI

IPC: G06F3/06 ,  G06F11/34 ,  G06F11/30

Abstract: A storage controller measures a RAID group (RG) operating time, which is the operating time of an RG. The storage controller then corrects the measured RG operating time, which is used to calculate the operating rate of the RG, on the basis of a correction coefficient associated with the type of the physical devices (PDEVs) constituting the RG, and on the basis of the RG backend multiplicity, which is the multiplicity of the I/O commands transmitted to the RG.