Cloud Disk Internal Storage for Encrypted Drive Protocols
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Self-encrypting Drives (SEDs) are limited to physical disk drives, requiring internal storage that is not convenient or cost-effective for cloud implementations, and current cloud solutions lack support for encrypted hard drives with persistent internal states.
Innovation Solution
Implementing a virtual disk storage system with an internal disk storage area to support encrypted hard drive protocols, using a dedicated block backend to manage system input/output operations and maintain internal disk states, isolating the storage area from the guest operating system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hardware Self-encrypting Drive (SED) is used to support security protocols with internal encryption, then data security is improved, but device cost and convenience are worsened due to requirements for physical disk drives with dedicated internal storage
Solution Approach 1:
The patent creates a virtual copy of the SED functionality by implementing a virtual disk storage system that emulates the behavior and security features of physical self-encrypting drives. The virtual disk includes an internal storage area that maintains encrypted states and security protocols, allowing cloud-based virtual machines to access encrypted storage without requiring physical SED hardware. This copying approach enables SED functionality to be delivered as a virtualized service, reducing hardware costs while maintaining security reliability.
2Reliability
If physical disk drives with internal storage are used for SED, then encrypted hard drive functionality is achieved, but adaptability to cloud environments is worsened due to hardware-specific limitations
Solution Approach 1:
The patent creates a universal encrypted storage solution by designing a virtual disk storage system that can be deployed across diverse cloud computing environments. The virtual disk implementation provides SED functionality through software-based encryption managed by a hypervisor, making the encrypted storage capability portable and adaptable to different cloud platforms and virtual machine configurations. This multi-functional approach allows the same encrypted storage solution to serve various cloud service models and deployment scenarios.
3Stability of the object's composition
If internal storage is provided on physical disk drives for SED, then persistent internal state is maintained, but cloud implementation convenience is worsened due to manufacturer-specific implementations
Solution Approach 1:
The patent introduces a hypervisor-managed virtual disk layer as an intermediary between the physical storage infrastructure and the virtual machines requiring encrypted storage. This virtual disk layer abstracts the complexity of persistent state management by providing a standardized interface for maintaining encrypted internal states, band configurations, and security credentials. The hypervisor manages the virtual disk's internal storage area, handling encryption operations and state persistence transparently, which simplifies cloud implementation while maintaining the stability of encrypted data states.
Data Source
AI summary
A cloud implementation of a persisted storage device, such as a disk, is provided. The implementation supports a variety of features and protocols, in full analogy with a physical storage device such as a disk drive. The present disclosure provides for implementing standard eDrive protocols in the cloud by designing internal disk storage, referred to as a “system area,” in a virtual disk instance that the virtual disk can potentially utilize for a multitude of disk features. This internal storage can be used to implement eDrive protocols, which use the system area to maintain the necessary internal virtual disk state.