Encrypted Storage Transfer Without Decryption Overhead
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data at rest is vulnerable to unauthorized access during transmission between storage devices due to being decrypted and re-encrypted, leading to increased latency, power consumption, and decreased throughput.
Innovation Solution
Storage devices transmit and store data in encrypted format without decryption, using encryption/decryption keys to ensure secure transfer and storage, reducing unnecessary encryption/decryption processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is decrypted and re-encrypted during transmission between storage devices, then data security is maintained, but latency increases and throughput decreases
Solution Approach 1:
The patent introduces an intermediary mechanism where the storage controller preserves the encrypted data state during transmission. Instead of decrypting and re-encrypting, the system uses the existing encryption as a secure intermediary form, eliminating the need for decryption operations while maintaining security.
Solution Approach 2:
The encryption operation continues uninterrupted during data transmission. The data remains in encrypted format from the source storage device through the transmission medium to the destination, eliminating the interruptive decryption and re-encryption cycles that would otherwise occur.
2Reliability
If data is decrypted and re-encrypted during transmission between storage devices, then data security is maintained, but power consumption increases
Solution Approach 1:
The encrypted data serves as a secure intermediary that eliminates the need for power-intensive decryption and re-encryption operations. The system leverages the existing encryption state to maintain security without consuming additional energy on cryptographic operations during transmission.
Solution Approach 2:
The encryption operation continues uninterrupted during data transmission, eliminating the interruptive decryption and re-encryption cycles that would otherwise consume additional power. The data remains in encrypted format throughout the transmission process.
3Reliability
If data is decrypted and re-encrypted during transmission between storage devices, then data security is maintained, but latency increases
Solution Approach 1:
The encrypted data acts as a secure intermediary that eliminates the need for time-consuming decryption and re-encryption operations. The system preserves the encryption state during transmission, avoiding the temporal overhead of cryptographic operations.
Solution Approach 2:
The encryption operation continues uninterrupted during data transmission, eliminating the interruptive decryption and re-encryption cycles that would otherwise introduce latency. The data remains in encrypted format throughout the transmission process.
4Reliability
If data is transmitted in encrypted format without decryption, then transmission security is enhanced, but compatibility issues may arise
Solution Approach 1:
The storage controller acts as an intermediary that manages encryption compatibility. It preserves the encrypted data state during transmission while handling key management and encryption protocol coordination between different storage devices, enabling secure transmission without requiring decryption.
Solution Approach 2:
The system performs preliminary encryption setup and key management before data transmission begins. The storage controller pre-configures encryption parameters and establishes secure communication channels, ensuring compatibility between different storage devices before actual data transfer occurs.
Data Source
AI summary
A storage device includes: a storage memory component to store requested data in encrypted format; and a storage controller connected to the storage memory component over a storage interface, the storage controller to: receive a command and a decryption override indicator from a host device over a host interface to read the requested data from the storage memory component; retrieve the requested data from the storage memory component in the encrypted format in response to the command; and transmit the requested data in the encrypted format to a destination storage device over a transport layer in response to the decryption override indicator.


