Storage Media Encryption Write Acceleration via Parallel Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Storage media encryption (SME) processes introduce significant delays due to encryption and compression, leading to a 50% drop in write input/output performance and noticeable latencies, particularly in tape storage systems where only one outstanding I/O command is supported.
Innovation Solution
Implementing write acceleration by using multiple processors to perform compression and encryption in parallel, allowing the host to send multiple write commands without delay, where a status is sent to the host before data processing is complete, and data is transmitted to the target after receipt, enabling simultaneous processing of multiple write commands.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data compression and encryption are performed sequentially before data transmission, then data security and size reduction are improved, but write I/O performance deteriorates due to processing delays
Solution Approach 1:
The patent applies preliminary action by sending a status message to the host before the encryption and compression processes are complete. This allows the host to initiate subsequent write commands without waiting for the current data to be fully processed, effectively overlapping I/O operations with data processing and eliminating idle waiting time.
Solution Approach 2:
The patent implements dynamics by using multiple processors that can dynamically handle different stages of data processing simultaneously. One processor can handle encryption while another handles compression, and both can operate in parallel with multiple I/O commands, creating a dynamic pipeline that maintains high throughput while ensuring data security.
2Device complexity
If only one outstanding I/O command is supported (as in tape storage), then device simplicity is improved, but write performance deteriorates due to sequential processing requirements
Solution Approach 1:
By sending the status message before processing completion, the system enables the host to issue the next I/O command immediately, creating an overlapped execution model that effectively increases the number of outstanding commands supported even in systems traditionally limited to one outstanding command.
Solution Approach 2:
The patent segments the data processing workflow into distinct phases (encryption, compression, transmission) that can be handled by different processors simultaneously. This segmentation allows the system to manage multiple I/O commands in parallel despite the underlying storage device supporting only one outstanding command, as different commands are at different stages of processing.
3Productivity
If multiple processors are used for parallel compression and encryption, then processing throughput is improved, but device complexity increases
Solution Approach 1:
The patent divides the data processing workload into separate segments handled by different processors - one processor dedicated to encryption and another to compression. This segmentation allows parallel processing of the same data stream, doubling the effective throughput while keeping each processor's individual complexity manageable.
Solution Approach 2:
The multiple processors are designed with universal capabilities to handle different stages of data processing (encryption, compression, and potentially other transformations). This multi-functionality allows the system to achieve high throughput for various data processing tasks without requiring specialized hardware for each function, thereby managing overall device complexity.
Data Source
AI summary
Methods and apparatus for performing Storage Media Encryption (SME) are disclosed. In one embodiment, an apparatus includes a memory and a plurality of processors. The apparatus receives a write command from a network device. The apparatus sends a transfer ready to the network device in response to the write command. The apparatus receives data from the network device. The apparatus composes a status and sends the status the network device. The status is sent to the network device after the data has been received from the network device and prior to both compressing and encrypting the data. The apparatus compresses the data to generate compressed data. One of the plurality of processors encrypts the compressed data to generate modified data. The apparatus then sends the modified data to a target indicated by the write command.