Systems, methods and computer-readable media for providing enhanced encryption in a storage system
Described herein are systems, methods, and computer-readable media for providing enhanced encryption in a data storage system. An example method can include receiving a data set, selecting a first portion of the data set as a unique encryption key, encrypting a second portion of the data set using the unique encryption key, and writing the encrypted second portion of the data set to a storage device.
1. A computer-implemented method for providing enhanced encryption in a data storage system, comprising:
receiving, using a processor, a data set comprising a plurality of data blocks;
selecting, using the processor, a first portion of the data set as a unique encryption key, the first portion of the data set comprising one or more of the data blocks;
encrypting, using the processor, a second portion of the data set using the unique encryption key, the second portion of the data set comprising one or more of the data blocks, wherein each of the first and second portions of the data set comprises different data blocks;
encrypting, using the processor, the first portion of the data set using a user-defined encryption key;
partitioning, using the processor, the encrypted data set into a plurality of data blocks, wherein the encrypted data set includes the encrypted first and second portions of the data set; and
writing, using the processor, the plurality of data blocks of the encrypted data set in a non-sequential order to a storage device.
2. The computer-implemented method of claim 1 , further comprising restricting, using the processor, access to the user-defined encryption key.
3. The computer-implemented method of claim 1 , wherein the plurality of data blocks of the encrypted data set are written at a contiguous region of the storage device.
4. The computer-implemented method of claim 3 , further comprising maintaining, using the processor, a lookup table for storing the non-sequential order of the plurality of data blocks written at the contiguous region of the storage device.
5. The computer-implemented method of claim 1 , wherein the plurality of data blocks of the encrypted data set are written at a plurality of non-contiguous regions of the storage device.
6. The computer-implemented method of claim 5 , further comprising maintaining, using the processor, a mapping table for storing respective physical locations of the plurality of data blocks written at the plurality of non-contiguous regions of the storage device.
7. The computer-implemented method of claim 1 , further comprising serializing, using the processor, the plurality of data blocks of the encrypted data set with a plurality of data blocks of a second encrypted data set.
8. The computer-implemented method of claim 1 , wherein the first portion of the data set is at least one of randomly selected, selected by a user, or selected in dependence on a target logical volume for the data set.
9. A non-transitory computer-readable recording medium having computer-executable instructions stored thereon for providing enhanced encryption in a data storage system that, when executed by a processor, cause the processor to:
receive a data set comprising a plurality of data blocks;
select a first portion of the data set as a unique encryption key, the first portion of the data set comprising one or more of the data blocks;
encrypt a second portion of the data set using the unique encryption key, the second portion of the data set comprising one or more of the data blocks, wherein each of the first and second portions of the data set comprises different data blocks;
encrypt the first portion of the data set using a user-defined encryption key;
partition the encrypted data set into a plurality of data blocks, wherein the encrypted data set includes the encrypted first and second portions of the data set; and
write the plurality of data blocks of the encrypted data set in a non-sequential order to a storage device.
10. The non-transitory computer-readable recording medium of claim 9 , having further computer-executable instructions stored thereon that, when executed by the processor, cause the processor to restrict access to the user-defined encryption key.
11. The non-transitory computer-readable recording medium of claim 9 , wherein the plurality of data blocks of the encrypted data set are written at a contiguous region or non-contiguous region of the storage device.
12. The non-transitory computer-readable recording medium of claim 9 , having further computer-executable instructions stored thereon that, when executed by the processor, cause the processor to serialize the plurality of data blocks of the encrypted data set with a plurality of data blocks of a second encrypted data set.
13. The non-transitory computer-readable recording medium of claim 9 , wherein the first portion of the data set is at least one of randomly selected, selected by a user, or selected in dependence on a target logical volume for the data set.
14. A storage server computer for providing enhanced encryption, comprising:
a processor; and
a memory operably connected to the processor, the memory having computer-executable instructions stored thereon that, when executed by the processor, cause the processor to:
receive a data set comprising a plurality of data blocks;
select a first portion of the data set as a unique encryption key, the first portion of the data set comprising one or more of the data blocks;
encrypt a second portion of the data set using the unique encryption key, the second portion of the data set comprising one or more of the data blocks, wherein each of the first and second portions of the data set comprises different data blocks;
encrypt the first portion of the data set using a user-defined encryption key;
partition the encrypted data set into a plurality of data blocks, wherein the encrypted data set includes the encrypted first and second portions of the data set; and
write the plurality of data blocks of the encrypted data set in a non-sequential order to a storage device.