Techniques for encrypting data on storage devices using an intermediate key
    6.
    发明授权
    Techniques for encrypting data on storage devices using an intermediate key 有权
    使用中间密钥加密存储设备上的数据的技术

    公开(公告)号:US08315394B2

    公开(公告)日:2012-11-20

    申请号:US11923123

    申请日:2007-10-24

    IPC分类号: G06F21/00

    CPC分类号: H04L9/0822 H04L9/0863

    摘要: A data storage device encrypts data stored in non-volatile memory using a bulk encryption key. The data storage device uses a key derivation function to generate an initial encryption key. The data storage device then wraps an intermediate encryption key with the initial encryption key and stores the wrapped intermediate key in the non-volatile memory. The data storage device wraps the bulk encryption key with the intermediate encryption key and stores the wrapped bulk encryption key in the non-volatile memory. The data storage device can unwrap the wrapped intermediate key to generate the intermediate encryption key using the initial encryption key. The data storage device can unwrap the wrapped bulk encryption key to generate the bulk encryption key using the intermediate encryption key. The data storage device decrypts data stored in the non-volatile memory using the bulk encryption key.

    摘要翻译: 数据存储设备使用批量加密密钥对存储在非易失性存储器中的数据进行加密。 数据存储装置使用密钥导出函数来生成初始加密密钥。 然后,数据存储设备将具有初始加密密钥的中间加密密钥包裹起来,并将包裹的中间密钥存储在非易失性存储器中。 数据存储设备将批量加密密钥与中间加密密钥打包,并将包装的批量加密密钥存储在非易失性存储器中。 数据存储设备可以使用初始加密密钥解包包裹的中间密钥以产生中间加密密钥。 数据存储设备可以使用中间加密密钥解开包装的批量加密密钥以生成批量加密密钥。 数据存储装置使用批量加密密钥对存储在非易失性存储器中的数据进行解密。

    Techniques For Encrypting Data On Storage Devices Using An Intermediate Key
    7.
    发明申请
    Techniques For Encrypting Data On Storage Devices Using An Intermediate Key 有权
    使用中间密钥对存储设备上的数据进行加密的技术

    公开(公告)号:US20090110191A1

    公开(公告)日:2009-04-30

    申请号:US11923123

    申请日:2007-10-24

    IPC分类号: H04L9/08

    CPC分类号: H04L9/0822 H04L9/0863

    摘要: A data storage device encrypts data stored in non-volatile memory using a bulk encryption key. The data storage device uses a key derivation function to generate an initial encryption key. The data storage device then wraps an intermediate encryption key with the initial encryption key and stores the wrapped intermediate key in the non-volatile memory. The data storage device wraps the bulk encryption key with the intermediate encryption key and stores the wrapped bulk encryption key in the non-volatile memory. The data storage device can unwrap the wrapped intermediate key to generate the intermediate encryption key using the initial encryption key. The data storage device can unwrap the wrapped bulk encryption key to generate the bulk encryption key using the intermediate encryption key. The data storage device decrypts data stored in the non-volatile memory using the bulk encryption key.

    摘要翻译: 数据存储设备使用批量加密密钥对存储在非易失性存储器中的数据进行加密。 数据存储装置使用密钥导出函数来生成初始加密密钥。 然后,数据存储设备将具有初始加密密钥的中间加密密钥包裹起来,并将包裹的中间密钥存储在非易失性存储器中。 数据存储设备将批量加密密钥与中间加密密钥打包,并将包装的批量加密密钥存储在非易失性存储器中。 数据存储设备可以使用初始加密密钥解包包裹的中间密钥以产生中间加密密钥。 数据存储设备可以使用中间加密密钥解开包装的批量加密密钥以生成批量加密密钥。 数据存储装置使用批量加密密钥对存储在非易失性存储器中的数据进行解密。

    Distributed field self-test for shingled magnetic recording drives
    8.
    发明授权
    Distributed field self-test for shingled magnetic recording drives 有权
    用于带状磁记录驱动器的分布式现场自检

    公开(公告)号:US08599507B2

    公开(公告)日:2013-12-03

    申请号:US13312979

    申请日:2011-12-06

    IPC分类号: G11B27/36 G11B5/09

    CPC分类号: G11B27/36 G11B2220/2516

    摘要: A method is described for allowing disk drives, such as shingle-written magnetic recording (SMR) drives, to be shipped for customer use with portions of the magnetic media being left untested. The testing is then completed by the drive self-testing in the field. The drive is made functional at the factory by fully testing at least one operational set of regions including an I-region, an E-region and a write cache region. The operational set of regions works as a separate self-contained virtual disk drive and can be used immediately. The remaining untested areas on the media can be tested in the field by a background task and/or when the first write command is received that requires a new track or operational set of regions (on-the fly testing).

    摘要翻译: 描述了一种用于允许磁盘驱动器(例如瓦楞纸磁性记录(SMR)驱动器)被运送以供客户使用的方法,部分磁性介质未被测试。 然后通过本领域的驱动自检来完成测试。 通过完全测试至少一个可操作的I区域,E区域和写入缓存区域的区域,驱动器在工厂生效。 区域的操作集合作为独立的独立虚拟磁盘驱动器,可以立即使用。 可以通过后台任务和/或当接收到需要新的轨迹或操作的一组区域(即时测试)的第一个写入命令时,媒体上剩余的未测试区域可以在现场进行测试。

    Distributed Field Self-test for Shingled Magnetic Recording Drives
    9.
    发明申请
    Distributed Field Self-test for Shingled Magnetic Recording Drives 有权
    带状磁记录驱动器的分布式现场自检

    公开(公告)号:US20130142024A1

    公开(公告)日:2013-06-06

    申请号:US13312979

    申请日:2011-12-06

    IPC分类号: G11B27/36

    CPC分类号: G11B27/36 G11B2220/2516

    摘要: A method is described for allowing disk drives, such as shingle-written magnetic recording (SMR) drives, to be shipped for customer use with portions of the magnetic media being left untested. The testing is then completed by the drive self-testing in the field. The drive is made functional at the factory by fully testing at least one operational set of regions including an I-region, an E-region and a write cache region. The operational set of regions works as a separate self-contained virtual disk drive and can be used immediately. The remaining untested areas on the media can be tested in the field by a background task and/or when the first write command is received that requires a new track or operational set of regions (on-the fly testing).

    摘要翻译: 描述了一种用于允许磁盘驱动器(例如瓦楞纸磁性记录(SMR)驱动器)被运送以供客户使用的方法,部分磁性介质未被测试。 然后通过本领域的驱动自检来完成测试。 通过完全测试至少一个可操作的I区域,E区域和写入缓存区域的区域,驱动器在工厂生效。 区域的操作集合作为独立的独立虚拟磁盘驱动器,可以立即使用。 可以通过后台任务和/或当接收到需要新的轨迹或操作的一组区域(即时测试)的第一个写入命令时,媒体上剩余的未测试区域可以在现场进行测试。

    Techniques for providing verifiable security in storage devices
    10.
    发明授权
    Techniques for providing verifiable security in storage devices 有权
    在存储设备中提供可验证安全性的技术

    公开(公告)号:US07971241B2

    公开(公告)日:2011-06-28

    申请号:US11615843

    申请日:2006-12-22

    IPC分类号: G06F7/04

    CPC分类号: G06F21/80

    摘要: A verifiable security mode is provided for securing data on a storage device, such as a hard disk drive. When the verifiable security mode is enabled, only authenticated accesses to data stored on the storage device are permitted after entering a password. An end user is prevented from disabling the verifiable security mode. The verifiable security mode can be set to allow or disallow an administrator from disabling the verifiable security mode. The verifiable security mode can be implemented, for example, in firmware on a hard disk drive (HDD).

    摘要翻译: 提供了可验证的安全模式,用于将数据保护在诸如硬盘驱动器的存储设备上。 当启用可验证的安全模式时,只有在输入密码后才允许对存储设备上存储的数据进行身份验证访问。 防止最终用户禁用可验证的安全模式。 可验证的安全模式可以设置为允许或禁止管理员禁用可验证的安全模式。 可验证的安全模式可以例如在硬盘驱动器(HDD)上的固件中实现。