SAN Encryption Offloading to Dedicated Processor
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional storage area networks (SANs) face inefficiencies in encryption processing, as hosts may become overwhelmed, leading to performance degradation and potential errors during data encryption and decryption operations.
Innovation Solution
A method and apparatus to offload encryption processing from a host to a processor in a SAN system, where encryption is performed by the host if it is operating within a certain performance threshold and offloaded to a processor if the host is overloaded, ensuring efficient resource utilization and maintaining performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the host performs encryption processing, then data security is maintained, but host performance degrades when the host is overloaded
Solution Approach 1:
The patent extracts the encryption processing function from the host and relocates it to a dedicated processor in the storage array. This allows the host to offload encryption tasks, maintaining data security while preventing performance degradation. The dedicated processor handles encryption operations independently, separating this computationally intensive function from the host's general processing responsibilities.
Solution Approach 2:
The patent introduces a dedicated processor as an intermediary between the host and storage array. This intermediary component specifically handles encryption processing, acting as a buffer that protects the host from performance degradation while ensuring secure data operations. The dedicated processor mediates between the host's data transmission needs and the storage array's encryption requirements.
2Productivity
If encryption processing is offloaded to a processor, then host performance is maintained, but system complexity increases
Solution Approach 1:
The patent merges the encryption processing capability into the storage array infrastructure rather than requiring a completely separate system. The dedicated processor is integrated within the storage array, combining storage and encryption functions in a unified architecture. This reduces overall system complexity compared to having entirely separate components for each function.
Solution Approach 2:
The dedicated processor serves multiple functions within the storage array, handling encryption operations while being part of the broader storage infrastructure. This multi-functionality approach allows the same component to serve both as part of the storage system and as an encryption engine, reducing the need for additional specialized hardware and simplifying the overall system architecture.
3Use of energy by moving object
If the host performs encryption processing, then resource utilization is efficient, but errors may occur during high-load operations
Solution Approach 1:
The patent employs a dedicated processor that is specifically designed for encryption operations, sacrificing the host's general-purpose processing resources. This dedicated component handles encryption tasks that would otherwise burden the host, ensuring reliable operation even under high load. The host can maintain efficient resource utilization for its primary functions while the dedicated processor handles encryption without compromising reliability.
Data Source
AI summary
In one aspect, a method to offload encryption processing in a storage area network (SAN) system includes determining whether a host is performing at a first performance level, offloading encryption processing at a processor if the host is not performing at a first performance level and performing encryption processing at the host if the host is performing at a first performance level.