Key Use Fingerprint Checking for Correct I/O Encryption Keys

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data encryption methods lack a mechanism to verify the correct data encryption key during input/output operations, leading to potential data corruption due to incorrect key usage, which can occur during transmission, key issuance, or retrieval from local cache memory.

Innovation Solution

Incorporating a key use fingerprint with each data encryption key, generated from identifiers associated with the intended use, to verify the correct key for specific I/O operations by comparing the fingerprint with a second fingerprint independently created by the HBA during the encryption process.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data encryption is performed using a data encryption key, then data security is improved, but the risk of data corruption increases due to potential use of incorrect keys

Engineering Contradiction:

Improvedata securityVSAvoiddata corruption

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent performs key verification before data encryption by comparing a first key use fingerprint (generated from key identifier information) with a second key use fingerprint (independently generated from I/O operation information). This preliminary verification ensures the correct key is used, preventing data corruption while maintaining security.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If key verification mechanisms are implemented, then data integrity is improved, but system complexity increases

Engineering Contradiction:

Improvedata integrityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent verifies key correctness by comparing fingerprint parameters (generated from key identifiers and I/O operation information) rather than implementing complex verification protocols. This parameter-based approach maintains data integrity while minimizing system complexity.

Inventive Principle:

Principle #35Parameter changes

3Reliability

If key use fingerprint verification is performed for each I/O operation, then key correctness is ensured, but processing time increases

Engineering Contradiction:

Improvekey correctnessVSAvoidprocessing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent replaces complex mechanical key verification processes with a computational fingerprint comparison mechanism. By generating and comparing key use fingerprints (hash values) rather than performing exhaustive key validation, the system ensures key correctness with minimal processing time overhead.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS8995654B2Method for verifying correct encryption key utilization

Publication Date: 2015.03.31 AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE LTD

AI summary

A method for sending encrypted data in response to a request for an I/O operation. The method includes the steps of requesting a data encryption key, the request including one or more identifiers unique to the I/O operation; receiving a data encryption key attached with a first key use fingerprint, independently generating a second key use fingerprint in response to the one or more identifiers; comparing the first and the second key use fingerprints; and if the first key use fingerprint matches the second key use fingerprint, using the data encryption key to encrypt the data to be sent. In one embodiment, the one or more identifiers include at least one of a target identifier, a LUN identifier, and a LBA range identifier.