Techniques for encrypting data on storage devices using an intermediate key
    2.
    发明授权
    Techniques for encrypting data on storage devices using an intermediate key 有权
    使用中间密钥加密存储设备上的数据的技术

    公开(公告)号:US08315394B2

    公开(公告)日:2012-11-20

    申请号:US11923123

    申请日:2007-10-24

    IPC分类号: G06F21/00

    CPC分类号: H04L9/0822 H04L9/0863

    摘要: A data storage device encrypts data stored in non-volatile memory using a bulk encryption key. The data storage device uses a key derivation function to generate an initial encryption key. The data storage device then wraps an intermediate encryption key with the initial encryption key and stores the wrapped intermediate key in the non-volatile memory. The data storage device wraps the bulk encryption key with the intermediate encryption key and stores the wrapped bulk encryption key in the non-volatile memory. The data storage device can unwrap the wrapped intermediate key to generate the intermediate encryption key using the initial encryption key. The data storage device can unwrap the wrapped bulk encryption key to generate the bulk encryption key using the intermediate encryption key. The data storage device decrypts data stored in the non-volatile memory using the bulk encryption key.

    摘要翻译: 数据存储设备使用批量加密密钥对存储在非易失性存储器中的数据进行加密。 数据存储装置使用密钥导出函数来生成初始加密密钥。 然后,数据存储设备将具有初始加密密钥的中间加密密钥包裹起来,并将包裹的中间密钥存储在非易失性存储器中。 数据存储设备将批量加密密钥与中间加密密钥打包,并将包装的批量加密密钥存储在非易失性存储器中。 数据存储设备可以使用初始加密密钥解包包裹的中间密钥以产生中间加密密钥。 数据存储设备可以使用中间加密密钥解开包装的批量加密密钥以生成批量加密密钥。 数据存储装置使用批量加密密钥对存储在非易失性存储器中的数据进行解密。

    Techniques For Encrypting Data On Storage Devices Using An Intermediate Key
    3.
    发明申请
    Techniques For Encrypting Data On Storage Devices Using An Intermediate Key 有权
    使用中间密钥对存储设备上的数据进行加密的技术

    公开(公告)号:US20090110191A1

    公开(公告)日:2009-04-30

    申请号:US11923123

    申请日:2007-10-24

    IPC分类号: H04L9/08

    CPC分类号: H04L9/0822 H04L9/0863

    摘要: A data storage device encrypts data stored in non-volatile memory using a bulk encryption key. The data storage device uses a key derivation function to generate an initial encryption key. The data storage device then wraps an intermediate encryption key with the initial encryption key and stores the wrapped intermediate key in the non-volatile memory. The data storage device wraps the bulk encryption key with the intermediate encryption key and stores the wrapped bulk encryption key in the non-volatile memory. The data storage device can unwrap the wrapped intermediate key to generate the intermediate encryption key using the initial encryption key. The data storage device can unwrap the wrapped bulk encryption key to generate the bulk encryption key using the intermediate encryption key. The data storage device decrypts data stored in the non-volatile memory using the bulk encryption key.

    摘要翻译: 数据存储设备使用批量加密密钥对存储在非易失性存储器中的数据进行加密。 数据存储装置使用密钥导出函数来生成初始加密密钥。 然后,数据存储设备将具有初始加密密钥的中间加密密钥包裹起来,并将包裹的中间密钥存储在非易失性存储器中。 数据存储设备将批量加密密钥与中间加密密钥打包,并将包装的批量加密密钥存储在非易失性存储器中。 数据存储设备可以使用初始加密密钥解包包裹的中间密钥以产生中间加密密钥。 数据存储设备可以使用中间加密密钥解开包装的批量加密密钥以生成批量加密密钥。 数据存储装置使用批量加密密钥对存储在非易失性存储器中的数据进行解密。

    Techniques For Providing Verifiable Security In Storage Devices
    6.
    发明申请
    Techniques For Providing Verifiable Security In Storage Devices 有权
    在存储设备中提供可验证安全性的技术

    公开(公告)号:US20080155680A1

    公开(公告)日:2008-06-26

    申请号:US11615843

    申请日:2006-12-22

    IPC分类号: G06F7/04

    CPC分类号: G06F21/80

    摘要: A verifiable security mode is provided for securing data on a storage device, such as a hard disk drive. When the verifiable security mode is enabled, only authenticated accesses to data stored on the storage device are permitted after entering a password. An end user is prevented from disabling the verifiable security mode. The verifiable security mode can be set to allow or disallow an administrator from disabling the verifiable security mode. The verifiable security mode can be implemented, for example, in firmware on a hard disk drive (HDD).

    摘要翻译: 提供了可验证的安全模式,用于将数据保护在诸如硬盘驱动器的存储设备上。 当启用可验证的安全模式时,只有在输入密码后才允许对存储设备上存储的数据进行身份验证访问。 防止最终用户禁用可验证的安全模式。 可验证的安全模式可以设置为允许或禁止管理员禁用可验证的安全模式。 可验证的安全模式可以例如在硬盘驱动器(HDD)上的固件中实现。

    Storage device with write barrier sensitive write commands and write barrier insensitive commands
    7.
    发明申请
    Storage device with write barrier sensitive write commands and write barrier insensitive commands 有权
    具有写入屏障敏感写命令和写阻止不敏感命令的存储设备

    公开(公告)号:US20090006787A1

    公开(公告)日:2009-01-01

    申请号:US11823441

    申请日:2007-06-27

    IPC分类号: G06F12/00

    摘要: The invention is a storage device which implements a write barrier command and provides means for a host to designate other write commands as being sensitive or insensitive to the existence of write barrier commands. The device can optimize the execution of commands by changing the order of execution of write commands that are insensitive to write barrier command. In an embodiment of the invention a flag associated with the write command indicates whether the command is sensitive or insensitive to the existence of write barrier commands. In an embodiment of the invention the write barrier command can be implemented as a write command with a flag that indicates whether the command is a write barrier command. In one embodiment of the invention the queue of commands and data to be written to the media is stored in a non-volatile cache.

    摘要翻译: 本发明是一种实现写入屏障命令的存储设备,并且提供用于主机将其他写入命令指定为对写入障碍命令的存在敏感或不敏感的装置。 该设备可以通过改变对写入屏障命令不敏感的写入命令的执行顺序来优化命令的执行。 在本发明的实施例中,与写入命令相关联的标志指示命令是否对写入屏障命令的存在敏感或不敏感。 在本发明的一个实施例中,写入障碍命令可以被实现为具有指示该命令是写阻挡命令的标志的写入命令。 在本发明的一个实施例中,要写入媒体的命令和数据队列被存储在非易失性高速缓存中。

    Techniques for providing verifiable security in storage devices
    8.
    发明授权
    Techniques for providing verifiable security in storage devices 有权
    在存储设备中提供可验证安全性的技术

    公开(公告)号:US07971241B2

    公开(公告)日:2011-06-28

    申请号:US11615843

    申请日:2006-12-22

    IPC分类号: G06F7/04

    CPC分类号: G06F21/80

    摘要: A verifiable security mode is provided for securing data on a storage device, such as a hard disk drive. When the verifiable security mode is enabled, only authenticated accesses to data stored on the storage device are permitted after entering a password. An end user is prevented from disabling the verifiable security mode. The verifiable security mode can be set to allow or disallow an administrator from disabling the verifiable security mode. The verifiable security mode can be implemented, for example, in firmware on a hard disk drive (HDD).

    摘要翻译: 提供了可验证的安全模式,用于将数据保护在诸如硬盘驱动器的存储设备上。 当启用可验证的安全模式时,只有在输入密码后才允许对存储设备上存储的数据进行身份验证访问。 防止最终用户禁用可验证的安全模式。 可验证的安全模式可以设置为允许或禁止管理员禁用可验证的安全模式。 可验证的安全模式可以例如在硬盘驱动器(HDD)上的固件中实现。

    Storage device with write barrier sensitive write commands and write barrier insensitive commands
    9.
    发明授权
    Storage device with write barrier sensitive write commands and write barrier insensitive commands 有权
    具有写入屏障敏感写命令和写阻止不敏感命令的存储设备

    公开(公告)号:US08006047B2

    公开(公告)日:2011-08-23

    申请号:US11823441

    申请日:2007-06-27

    IPC分类号: G06F12/00

    摘要: The invention is a storage device which implements a write barrier command and provides means for a host to designate other write commands as being sensitive or insensitive to the existence of write barrier commands. The device can optimize the execution of commands by changing the order of execution of write commands that are insensitive to write barrier command. In an embodiment of the invention a flag associated with the write command indicates whether the command is sensitive or insensitive to the existence of write barrier commands. In an embodiment of the invention the write barrier command can be implemented as a write command with a flag that indicates whether the command is a write barrier command. In one embodiment of the invention the queue of commands and data to be written to the media is stored in a non-volatile cache.

    摘要翻译: 本发明是一种实现写入屏障命令的存储设备,并且提供用于主机将其他写入命令指定为对写入障碍命令的存在敏感或不敏感的装置。 该设备可以通过改变对写入屏障命令不敏感的写入命令的执行顺序来优化命令的执行。 在本发明的实施例中,与写入命令相关联的标志指示命令是否对写入屏障命令的存在敏感或不敏感。 在本发明的一个实施例中,写屏障命令可以被实现为具有指示该命令是否是写屏障命令的标志的写入命令。 在本发明的一个实施例中,要写入媒体的命令和数据队列被存储在非易失性高速缓存中。

    Random number generation for a host system using a hard disk drive
    10.
    发明授权
    Random number generation for a host system using a hard disk drive 有权
    使用硬盘驱动器的主机系统的随机数生成

    公开(公告)号:US08019935B2

    公开(公告)日:2011-09-13

    申请号:US11963839

    申请日:2007-12-23

    IPC分类号: G06F12/00 G06F7/58

    CPC分类号: G06F7/58

    摘要: A hard disk drive is provided for enhancing random number generation. In particular embodiments, the hard disk drive includes a storage subsystem and a controller. The controller generates a random number based on information associated with the storage subsystem. The controller transmits the random number to a host system.

    摘要翻译: 提供了一个硬盘驱动器来增强随机数生成。 在特定实施例中,硬盘驱动器包括存储子系统和控制器。 控制器基于与存储子系统相关联的信息生成随机数。 控制器将随机数发送到主机系统。