Method and system for securing network data
View Patent ↗Method and system for storing data in a storage device accessible through a storage area network is provided. The method includes receiving data from a host system; generating a first encryption key for encrypting data information that describes the received data; generating a second encryption key that encrypts the first encryption key and the encrypted data information; generating an encryption packet that includes the second encryption key, the first encryption key and the data information; storing the encryption packet at one or more memory locations; and periodically refreshing the encryption packet without periodically encrypting the received data for securely storing the received data.
1. A machine-implemented method, comprising:
receiving data from a host system;
generating a first encryption key for encrypting data information that describes the received data;
generating a second encryption key that encrypts the first encryption key and the data information;
generating an encryption packet that includes the second encryption key, the first encryption key and the data information;
storing the encryption packet at one or more memory locations; and
periodically regenerating the encryption packet.
2. The method of claim 1 , wherein a device receives the data from the host system.
3. The method of claim 2 , wherein a key generator module in the device generates the first encryption key, the second encryption key and the encryption packet.
4. The method of claim 2 , wherein the encryption packet is stored in the device.
5. The method of claim 1 , wherein the data information includes logical unit information (LUN) and logical block address (LBA) information.
6. A system, comprising:
a host system for writing and reading data from a storage device that is accessible through a storage area network;
a device that receives the data from the host system and (a) generates a first encryption key for encrypting data information that describes the data received from the host system; (b) generates a second encryption key that encrypts the first encryption key and the data information; and (c) generates an encryption packet that includes the second encryption key, the first encryption key and encrypted data information; wherein the encryption packet is stored in a memory for the device; and the device periodically regenerates the encryption packet.
7. The system of claim 6 , wherein a key generator module in the device generates the first encryption key, the second encryption key and the encryption packet.
8. The system of claim 6 , wherein the data information includes logical unit number (LUN) information and logical block address (LBA) information.
9. A device, comprising:
a memory:
an interface for receiving data from a host system; and
a key generator module that (a) generates a first encryption key for encrypting data information that describes the data received from the host system; (b) generates a second encryption key that encrypts the first encryption key and the data information; and (c) generates an encryption packet that includes the second encryption key, the first encryption key and the encrypted data information; and (d) stores the encryption packet in the memory; wherein the device periodically regenerates the encryption packet.
10. The device of claim 9 , wherein the device is a Fibre Channel based device.
11. The device of claim 9 , wherein the data information includes logical unit information (LUN) and logical block address (LBA) information.