Patent ID: 11861027
Assignee: Q-NET SECURITY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. An apparatus, comprising:
a data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations; wherein said performing data plane processing operations does not expose any of a plurality of pilot keys outside the data safe in clear form nor in encrypted form; and
wherein the data safe includes:
non-volatile storage that stores the plurality of pilot keys at retrievable positions based on data storage locator information associated with a storage system;
cryptographic key generation circuitry producing the plurality of pilot keys;
encryption circuitry, for each particular write data request of said received write data requests, encrypting particular information resulting in encrypted particular information included in a particular write information request to the storage system, with said encrypted particular information being decryptable based on a particular pilot key of the plurality of pilot keys; and
decryption circuitry, for each specific read information response of a plurality of read information responses and using a specific pilot key of the plurality of pilot keys, decrypting specific encrypted information received from the storage system in said specific read information response that corresponds to a particular read data request of said received read data requests and results in specific data included in a database read data response, with the specific pilot key having been retrieved from said non-volatile storage based on data storage locator information corresponding to said specific read information response or the particular read data request.