Patent ID: 8423795
Filing Date: 2013-04-16
Classification: G06F

Abstract:
1. A storage controller comprising a storage apparatus for storing data from a host computer in a primary volume and storing backup data of the data from the host computer in a secondary volume, and a controller for controlling the input and output of data stored in said storage apparatus, wherein said storage controller comprises: a configuration information management device constructed at least in part of one of a hardware processor and circuitry, and configured to manage configuration information of attributes concerning an encryption function as information for encrypting data, and manage setting information to manage a corresponding relationship between the primary and secondary volumes; an encryption determination device constructed at least in part of one of a hardware processor and circuitry, and configured to determine to perform encryption to data stored in said storage apparatus based on said configuration information of attributes concerning the encryption function, said encryption determination device searches and determines information of said storage apparatus for performing encryption, and searches and determines information of a storage area related to said storage apparatus for performing encryption; an encryption execution device constructed at least in part of one of a hardware processor and circuitry, and configured to perform encryption of the data from said host computer in the primary volume, determine the secondary volume corresponding to the primary volume based on the setting information, and perform encryption of the data previously stored in the secondary volume in said storage apparatus based on said configuration information of attributes concerning the encryption function; wherein said encryption execution device performs encryption to data related to data stored in said storage apparatus, upon performing encryption to said data stored in said storage apparatus; and wherein the encryption execution device, responsive to a request to change non-encrypted data previously stored in the primary volume to encrypted data, encrypting the non-encrypted data to the encrypted data, determining the secondary volume corresponding to the primary volume based on the setting information, and performing encryption of corresponding non-encrypted backup data previously stored in the secondary volume to encrypted backup data, based on said configuration information of attributes concerning the encryption function.