STORAGE COMMUNITIES OF INTEREST USING CRYPTOGRAPHIC SPLITTING
Methods and systems of managing access to data in a secure data storage network are disclosed. One such method includes associating a storage resource with a community of interest, the community of interest associated with a workgroup key providing access to a virtual disk, the virtual disk allowing access to a volume comprising a plurality of shares stored on a plurality of physical storage devices. The method also includes, upon determining a user of a client device is a member of the community of interest, providing access to the storage resource to the user, whereby the storage resource is associated with the workgroup key.
1 . A method of managing access to data in a secure data storage network, the method comprising:
associating a storage resource with a community of interest, the community of interest associated with a workgroup key providing access to a virtual disk, the virtual disk allowing access to a volume comprising a plurality of shares stored on a plurality of physical storage devices;
upon determining a user of a client device is a member of the community of interest, providing access to the storage resource to the user;
whereby the storage resource is associated with the workgroup key.
2 . The method of claim 1 , further comprising determining a user of a client device is a member of the community of interest by assessing user credentials at a secure storage appliance.
3 . The method of claim 2 , further comprising receiving the user credentials at the secure storage appliance from an application on the client device.
4 . The method of claim 1 , wherein the workgroup key is stored on a key server separate from a secure storage appliance.
5 . The method of claim 1 , wherein the storage resource is a host bus adapter port of a secure storage appliance.
6 . The method of claim 1 , wherein the storage resource is a share stored on a physical storage device.
7 . The method of claim 1 , wherein the storage resource is a SCSI port.
8 . The method of claim 1 , wherein associating the storage resource with the community of interest occurs on a secure storage appliance.
9 . The method of claim 1 , wherein the storage resource is configured to allow access to the workgroup key to members of the community of interest.
10 . The method of claim 1 , further comprising associating the storage resource with a second community of interest, the second community of interest associated with a second workgroup key providing access to a second virtual disk, the second virtual disk allowing access to a second volume comprising a second plurality of shares stored on a second plurality of physical storage devices.
11 . The method of claim 10 , wherein the storage resource is configured to allow access to the second workgroup key to members of the second community of interest.
12 . A secure storage appliance comprising:
a programmable circuit configured to execute program instructions which, when executed, cause the secure storage appliance to:
provide access to a plurality of storage resources to a client device;
associate a storage resource from among the plurality of storage resources with a community of interest, the community of interest associated with a workgroup key providing access to a virtual disk, the virtual disk allowing access to a volume comprising a plurality of shares stored on a plurality of physical storage devices;
upon determining a user of the client device is a member of the community of interest, provide access to the storage resource to the user, thereby associating the storage resource with the workgroup key.
13 . The secure storage appliance of claim 12 , further comprising a plurality of storage resources including a host bus adapter port.
14 . The secure storage appliance of claim 12 , wherein the programmable circuit is further programmed to determine a user of a client device is a member of the community of interest by assessing user credentials.
15 . The secure storage appliance of claim 14 , wherein the programmable circuit is further programmed to receive the user credentials from an application on the client device.
16 . The secure storage appliance of claim 12 , further comprising a plurality of storage resources including a SCSI port.
17 . The secure storage appliance of claim 12 , wherein the storage resource is a host bus adapter port of a secure storage appliance.
18 . The secure storage appliance of claim 12 , wherein the storage resource is a share stored on a physical storage device.
19 . The secure storage appliance of claim 12 , wherein the storage resource is a SCSI port.
20 . A secure data storage network comprising:
a client device;
a plurality of physical storage devices;
a secure storage appliance connected to the client device and the plurality of physical storage devices, the secure storage appliance including a programmable circuit configured to execute program instructions which, when executed, cause the secure storage appliance to:
provide access to a plurality of storage resources to the client device;
associate a storage resource from among a plurality of storage resources with a community of interest, the community of interest associated with a workgroup key providing access to a virtual disk, the virtual disk allowing access to a volume comprising a plurality of shares stored on the plurality of physical storage devices;
upon determining a user of the client device is a member of the community of interest, provide access to the storage resource to the user, thereby associating the storage resource with the workgroup key.