Host Buffer Encryption for Storage Device Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Storage device controllers that only encrypt data crossing a PCIE boundary during transfer from a host's memory to the storage device controller do not encrypt existing data on the storage device, and modifying or adding hardware to directly encrypt storage device data is costly and difficult.
Innovation Solution
A method and device that dynamically borrow the host's buffer to store plaintext data and write it back to the storage device in encrypted form, using an interface unit, transfer unit, and encryption unit to encrypt data without requiring modifications to the storage device controller.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If storage device controller only encrypts data crossing PCIE boundary during transfer from host memory, then encryption function is simple and cost-effective, but existing data on storage device cannot be encrypted
Solution Approach 1:
The patent introduces the host buffer as an intermediary component that enables the storage device controller to encrypt existing data without requiring direct encryption hardware in the controller. The host buffer acts as a temporary storage location where data is read, encrypted by the host, and then written back to the storage device, thus resolving the contradiction between encryption capability and controller complexity
Solution Approach 2:
The encryption process is segmented into distinct phases: reading data from storage device to host buffer, encrypting data in host buffer, and writing encrypted data back to storage device. This segmentation allows the storage device controller to maintain simplicity while achieving encryption of existing data through coordination with the host
2Adaptability or versatility
If modify or add hardware to storage device controller to encrypt existing data, then existing data can be encrypted, but cost and difficulty increase significantly
Solution Approach 1:
The host buffer serves as a mediator that eliminates the need for hardware modifications in the storage device controller. By using the existing host buffer as an intermediary storage location, the system achieves encryption of existing data through software-based encryption in the host rather than hardware changes in the controller
Solution Approach 2:
The host system performs the encryption function using its own resources (buffer and processing capability) rather than requiring the storage device controller to provide encryption hardware. This self-service approach allows existing data encryption without modifying the controller's hardware architecture
3Device complexity
If use host buffer to store and encrypt data, then encryption of existing data is achieved at low cost, but data transfer time increases
Solution Approach 1:
The system performs encryption as a preliminary action before writing data back to the storage device. By reading data into the host buffer, encrypting it, and then writing it back in a single operation, the system minimizes the time penalty while achieving encryption of existing data
Solution Approach 2:
The patent merges the encryption operation with the data write-back operation into a single coordinated action. The host buffer is used to both store the data temporarily and as the source for the encrypted write-back, combining multiple operations into one efficient sequence that reduces overall latency
Data Source
AI summary
A request from a host is received requesting data from a storage device. Data of the storage device is written into a buffer of the host. The data at the buffer is to be encrypted and written back to the storage device. The requested data of the request is written to the buffer after the encrypted data is written back to the storage device.