Patent ID: 9152578
Filing Date: 2015-10-06
Classification: G06F,H04L

Abstract:
1. A method of securing data in cloud storage, the method comprising: receiving, by processing circuitry, a replicated input/output (I/O) request which includes host data from a local host computer; encrypting, by the processing circuitry, the host data to form encrypted data and sending a block-based write transaction which includes the encrypted data to a remote replication storage array to store the encrypted data within the remote replication storage array; and storing, by the processing circuitry in response to an original input/output (I/O) request which includes the host data, the host data in unencrypted form within a local production storage array, the encrypted data being stored within the remote replication storage array to secure the unencrypted host data which is stored at the local production storage array; wherein the processing circuitry is (i) local to a production logical unit (LU) of the production storage array and (ii) remote from a replication LU of the replication storage array; wherein storing the host data within the production storage array includes writing unencrypted host data from the processing circuitry to the production LU of the production storage array; wherein encrypting the host data includes generating, by the processing circuitry, encrypted host data which is different from the unencrypted host data written to the production LU of the production storage array; and wherein sending the block-based write transaction includes writing the encrypted host data to the replication LU of the replication storage array to simultaneously maintain (i) the encrypted host data at the replication LU of the replication storage array and (ii) the unencrypted host data at the production LU of the production storage array.