Thin Provisioned LUN Encryption via Selective Extent Materialization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional storage management systems face inefficiencies in provisioning, leading to wasted resources and prolonged setup times when dealing with encrypted data in thin provisioned storage systems, as existing software often requires prefilling entire LUNs with random data, which is time-consuming and disrupts operations.
Innovation Solution
A storage array controller with a high-speed hardware random number generator allows for selective materialization of extents with random data only as needed, and application software recognizes thin provisioned LUNs to skip unnecessary prefilling, using configuration options and commands like TRIM or UNMAP to manage storage block allocation efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing software.prefills entire LUNs with random data before encryption, then security is improved, but setup time increases significantly
Solution Approach 1:
The patent extracts the random data generation function from the host software and places it in the storage array controller. Only the necessary portions of storage are materialized with random data when actually needed, rather than prefilling the entire LUN. This resolves the contradiction by maintaining security through random data generation while eliminating unnecessary time consumption from prefilling unused space.
Solution Approach 2:
The storage array controller performs preliminary setup of encryption capabilities and random data generation infrastructure in advance, so that when encryption is actually needed, the system can quickly materialize only the required portions with random data without requiring lengthy prefilling operations.
2Reliability
If traditional software.prefills entire LUNs with random data, then encrypted data security is improved, but storage efficiency deteriorates due to materialization
Solution Approach 1:
The patent extracts the random data materialization process from host-controlled operations to storage array controller operations, enabling on-demand materialization of only the specific storage blocks that are actually needed. This prevents unnecessary materialization of entire LUNs, maintaining security while improving storage efficiency by keeping data in thin-provisioned state until actually required.
Solution Approach 2:
The system applies different qualities to different portions of storage: only the specific blocks that need encryption are materialized with random data, while other blocks remain in an unmaterialized thin-provisioned state. This local differentiation maintains security for encrypted portions while preserving storage efficiency for unencrypted portions.
3Quantity of substance
If LUNs are resized in traditional storage management, then storage capacity is improved, but application availability deteriorates due to quiescing requirements
Solution Approach 1:
The storage array controller automatically manages LUN resizing operations without requiring application quiescing. The controller handles the expansion, data migration, and reconfiguration in the background while the application continues to access storage normally, thus improving availability while increasing capacity.
Solution Approach 2:
The system performs preliminary actions to prepare for resizing by allocating additional physical storage resources and setting up the infrastructure in advance, allowing the actual resize operation to complete quickly without disrupting application access to existing data.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach significantly reduces the time to set up and utilize encrypted data on thin provisioned LUNs, enhancing storage efficiency and security by avoiding unnecessary data materialization and zero-filled extents that could expose plain text data.
Implementation Method 1
A storage array controller with a high-speed hardware random number generator allows for selective materialization of extents with random data only as needed
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods and systems for thin provisioned storage. A storage array controller may materialize LUN extents, by filling extents with random data only as necessary at materialization time. Encryption software may recognize operation on a thin provisioned LUN having extents that are pre-filled and/or re-materialized on next use.