Encrypted Transport SSD Controller Write Amplification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current non-volatile storage technologies face challenges in improving performance, efficiency, and utility, particularly in reducing write amplification and enhancing data security and storage capacity in SSDs.
Innovation Solution
Implementing a two-stage encryption and compression mechanism in SSDs, where data is encrypted before compression, stored in flash memory, and then re-encrypted upon retrieval, while also using a secure communication link for key exchange and data transfer, to manage non-volatile storage effectively.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted before compression and stored in flash memory, then data security is enhanced, but write amplification increases
Solution Approach 1:
The system performs compression before encryption for write operations, reducing the amount of data that needs to be written to flash memory. This preliminary compression action decreases write amplification while maintaining security through subsequent encryption of the compressed data.
Solution Approach 2:
The patent inverts the traditional order of operations by compressing data before encryption during write operations, rather than encrypting first then compressing. This inversion reduces the volume of encrypted data written to storage, thereby reducing write amplification while maintaining security.
2Productivity
If a two-stage encryption and compression mechanism is implemented, then storage efficiency is enhanced, but device complexity increases
Solution Approach 1:
The system merges compression and encryption operations into a unified processing pipeline where compressed data is encrypted in a single pass. This combining of operations reduces the number of separate processing stages while maintaining the efficiency benefits of both compression and encryption.
Solution Approach 2:
The controller is designed to perform multiple functions including compression, encryption, and data management using a unified architecture. This multi-functionality reduces overall system complexity by consolidating operations that would otherwise require separate dedicated components.
3Reliability
If data is re-encrypted upon retrieval, then data security is enhanced, but processing time increases
Solution Approach 1:
The system performs decryption before any data processing or access operations during read operations. This preliminary decryption action ensures that data is processed in its plaintext form, reducing subsequent processing time while maintaining security through encryption during storage and transfer.
4Quantity of substance
If compression is applied to encrypted data, then storage capacity is enhanced, but compression effectiveness decreases
Solution Approach 1:
The patent inverts the traditional order by compressing data before encryption rather than compressing encrypted data. This inversion maintains compression effectiveness because compression algorithms work more efficiently on plaintext data, while still achieving reduced storage capacity through the compressed form that is then encrypted.
Data Source
AI summary
Method and apparatus for transferring protected data. In some embodiments, an encrypted transport solid state drive (SSD) has a non-volatile memory and a controller circuit. The controller circuit is configured to, responsive to receipt of a write command from a host device to store an encrypted data set to the non-volatile memory, decrypt the encrypted data set using a first encryption key to generate a decrypted data set, apply lossless compression to the decrypted data set to generate a decrypted compressed data set, encrypt the decrypted compressed data set using a second encryption key to generate an encrypted compressed data set, and to direct storage of the encrypted compressed data set in the non-volatile memory.