Code Conversion Apparatus for Disk Drive Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data encryption methods in disk drives are inefficient as they require reading data from the disk drive to perform encryption or decryption, leading to increased processing time and stagnation of read/write requests.
Innovation Solution
Implementing a code conversion apparatus within the storage system that includes encrypted-data and unencrypted-data storage units, along with encrypting, decrypting, and re-encrypting units to manage data encryption and decryption without reading data outside the storage system, allowing for simultaneous processing of read/write requests.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is read from the disk drive to perform encryption or decryption, then data security is improved, but processing time increases and read/write requests stagnate
Solution Approach 1:
The patent implements preliminary action by pre-reading data from the disk drive into the storage system's memory before encryption or decryption operations are requested. This allows the data to be readily available in memory when processing is needed, eliminating the time delay of reading from the disk during actual encryption/decryption operations while maintaining security through controlled access within the storage system.
Solution Approach 2:
The patent introduces an intermediary mechanism by using the storage system's memory as a buffer between the disk drive and the encryption/decryption processing. This intermediary layer allows data to be held temporarily in a secure, accessible state, enabling faster processing without compromising security, as the data remains within the protected storage system environment throughout the process.
2Reliability
If data is read from the disk drive for encryption or decryption, then data security is improved, but read/write request throughput decreases
Solution Approach 1:
The patent applies preliminary action by pre-loading data into the storage system's memory before encryption or decryption operations are initiated. This ensures that when read/write requests arrive, the data is already positioned in memory for immediate processing, preventing throughput stagnation while maintaining security through controlled internal processing within the storage system.
Solution Approach 2:
The patent implements continuity of useful action by maintaining data in the storage system's memory during encryption or decryption operations, allowing the process to proceed without interruption or repeated disk access. This continuous processing within the memory environment maintains high read/write request throughput while ensuring data security through the controlled storage system architecture.
3Reliability
If encryption or decryption is performed by reading data from the disk drive, then data security is ensured, but storage system efficiency decreases
Solution Approach 1:
The patent uses preliminary action by reading data into the storage system's memory before encryption or decryption operations begin. This pre-positioning of data in memory enables efficient processing without repeated disk access, significantly improving storage system efficiency while maintaining data security through the controlled internal processing environment of the storage system.
Solution Approach 2:
The patent introduces an intermediary layer using the storage system's memory to hold data during encryption or decryption operations. This intermediary mechanism allows fast memory-based processing to occur without direct, repeated access to the slower disk drive, thereby enhancing storage system efficiency while preserving data security through the protected memory environment within the storage system.
Data Source
AI summary
A code conversion apparatus, a disk drive, a code buffer, and an encryption buffer are included in a storage. The code buffer stores therein first encrypted data present in the disk drive, and the encryption buffer stores therein first unencrypted data present in the disk drive. An encrypting unit encrypts the first unencrypted data present in the encryption buffer to predetermined encrypted data, and a decrypting unit decrypts the first encrypted data present in the code buffer to second unencrypted data. Moreover, a re-encrypting unit decrypts the first encrypted data present in the code buffer to third unencrypted data and encrypts the third unencrypted data to second encrypted data different from the first encrypted data.