Mirrored Volume Key Rotation via Revive Operation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for key rotation in computer systems with mirrored storage devices disrupt redundancy and data availability, as they require reinitializing storage devices and copying data during the process, which can be time-consuming and interrupt operational continuity.
Innovation Solution
The method leverages mirrored volume procedures to perform key rotation by initializing a storage device with a new key and initiating a mirrored volume revive operation, ensuring continuous data availability and redundancy by copying data from another storage device, allowing the newly initialized device to join the mirrored volume seamlessly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional key rotation method is used (reading decrypted data, re-encrypting, and writing back), then key rotation can be performed, but redundancy is disrupted and data availability is interrupted
Solution Approach 1:
The patent uses a spare storage device as a copy target for the mirrored volume during key rotation. The spare device receives copied data encrypted with the new key while the original devices continue serving data requests, maintaining availability without disrupting redundancy
Solution Approach 2:
The patent pre-initializes a spare storage device with the new encryption key before the rotation process begins. This preliminary setup allows the spare device to immediately assume the role of a active storage device once data copying completes, avoiding interruption to service
2Adaptability or versatility
If storage device is reinitialized with new key, then key rotation is achieved, but device complexity increases and operational continuity is interrupted
Solution Approach 1:
The patent makes the spare storage device multi-functional by having it serve both as a standby replacement for failed devices and as a target for key rotation operations. This universal usage simplifies the overall system architecture and reduces the need for dedicated rotation infrastructure
Solution Approach 2:
The mirrored volume revive operation automatically handles the data copying and synchronization process from the original storage devices to the spare device. The system self-manages the complexity of coordination, error handling, and completion detection without requiring external intervention
3Reliability
If mirrored volume revive operation is used, then redundancy is maintained during key rotation, but implementation complexity increases
Solution Approach 1:
The patent merges the key rotation function with the existing mirrored volume revive operation. By combining these two separate functions into a single integrated process, the system leverages existing mature code paths and procedures, reducing implementation complexity while maintaining redundancy
Data Source
AI summary
Encryption key rotation is performed in computing environments having mirrored volumes by initializing a target storage media with a new key, performing a mirror revive operation from a first storage media to the target storage media, and configuring the first storage media and the target storage media to comprise a mirrored volume.