Patent ID: 9729524
Date: 2017-08-08
CPC Classifications: H04L

Claim:
1. A storage device, comprising: at least one non-transitory computer-readable storage medium for storing data on behalf of one or more users in a multi-tenant environment; at least one processor; and memory including instructions that, when executed by the at least one processor, cause the storage device to: receive, from a key management system, a cryptographic key; receive, from a first computing device of a corresponding user of the one or more users, an input/output command and a digital signature of the input/output command of the corresponding user, the input/output command received from a process executing in a guest of a hypervisor and the input/output command involving at least a read operation to be performed by the storage device with respect to data stored on behalf of the corresponding user of the one or more users in the multi-tenant environment, the digital signature generated based at least in part on the cryptographic key; verify the digital signature of the input/output command using the cryptographic key; authenticate a user identity of the corresponding user associated with the input/output command; and fulfill the input/output command using (a) cleartext in response to determining that the user identity corresponds to a first identity and (b) ciphertext in response to determining that the user identity corresponds to a second identity.