公开(公告)号：US10911225B2

公开(公告)日：2021-02-02

申请号：US15172952

申请日：2016-06-03

Applicant: Nutanix, Inc.

Inventor： Alexander Michael Bunch ,  Miao Cui ,  Ajay Prakash Kulkarni ,  Peter Alan Turshmid

IPC: H04L9/08 ,  H03M7/30 ,  H04L29/08 ,  G06F21/62 ,  G06F9/455 ,  H04L29/06

Abstract: An approach for full-path data encryption, where user virtualized computers (e.g., user VMs) are configured to communicate with other virtualized computers or VMs using IPsec protocol encryption standards. The user VMs may send a first encryption or authorization key to the other VMs, which the other VMs may use to authenticate the user VMs and encrypt and decrypt data stored to storage devices using a second encryption key. In some approaches, the other VMs may interpret or decrypt the data sent via IPsec and then perform data optimizations (e.g., compression, deduplication) on the data before decrypting/encrypting with the second key.