Nonvolatile Storage Data Transfer Encryption State Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In systems where nonvolatile storage devices independently perform encryption processing, data transfer between them requires repeated encryption and decryption, leading to a high encryption processing load.
Innovation Solution
A computer system with a processor and multiple nonvolatile storage devices, where each device holds an encryption key for encrypting and decrypting data, and transfers data in an encrypted or unencrypted state based on a predetermined rule, optimizing data transfer efficiency by minimizing the need for repeated encryption and decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If each nonvolatile storage device independently performs encryption processing, then data security is improved, but encryption processing load increases
Solution Approach 1:
Multiple storage devices share a common encryption key, merging their encryption capabilities into a coordinated system. This allows data to be encrypted once and transferred between devices without repeated encryption/decryption, reducing processing load while maintaining security across the storage system.
Solution Approach 2:
Data is encrypted in advance using a shared key before storage, so that subsequent transfers between storage devices do not require additional encryption processing. The preliminary encryption action eliminates the need for repeated processing during data movement.
2Reliability
If data is transferred in encrypted state between storage devices, then security is maintained, but processing overhead increases
Solution Approach 1:
Storage devices operate within a trusted system environment where they share common encryption keys and trust relationships. This merging of trust allows data to be transferred in encrypted form without requiring verification or re-encryption at each device, reducing processing overhead while maintaining security.
3Speed
If data is transferred in unencrypted state for efficiency, then transfer speed improves, but security risks increase
Solution Approach 1:
The encryption state of transferred data is determined locally by each storage device based on its relationship with the source device and the data's access control settings. This allows flexible determination of whether to transfer data encrypted or unencrypted, optimizing for both speed and security on a per-transfer basis.
4Productivity
If encryption keys are shared across multiple devices, then processing load is reduced, but key management complexity increases
Solution Approach 1:
A storage system controller acts as an intermediary that manages encryption keys for multiple storage devices. The controller handles key distribution, storage, and coordination, simplifying key management for individual devices while enabling shared key usage across the system to reduce processing load.
Data Source
AI summary
A computer system includes a processor, a volatile storage device that stores a program to be executed by the processor, and a plurality of nonvolatile storage devices that store data. Each of the plurality of nonvolatile storage devices holds a first encryption key for encrypting and decrypting first data. Each nonvolatile storage device in the plurality of nonvolatile storage devices transfers the first data to another nonvolatile storage device in the plurality of nonvolatile storage devices in an encrypted or unencrypted state determined according to a predetermined rule.