Patent ID: 8798262
Filing Date: 2014-08-05
Classification: G06F

Abstract:
1. A method comprising: receiving, at an encryption endpoint (EE) of a distributed computer system, via a storage Input/Output (I/O) stack of the system, the storage I/O stack having a key controller module (KCM): subsequently, receiving, at the EE, via the storage I/O stack, a storage command to process a block on the storage device, the block having a first address on the storage device, the first address being located within a region identified by the set of region entries, the first address corresponding to a second address, the second address being located within the corresponding region of the LV; determining, at the EE, the second address within the LV; cryptographically processing, at the EE, the block using an address-dependent cryptographic algorithm and the following inputs: wherein cryptographically processing the block using the address-dependent cryptographic algorithm includes applying the address-dependent cryptographic algorithm to data of the block taking both the determined second address and the encryption key as parameters such that cryptographically processing blocks having the same data but different second addresses yields different results.