Patent ID: 7983423
Filing Date: 2011-07-19
Classification: H04L

Abstract:
1. A method for re-keying ciphertext stored on a storage system, comprising: pre-generating a plurality of encryption keys by a first security appliance to be used to re-key data containers before a re-keying command requiring use of the plurality of encryption keys is received at the first security appliance; distributing the plurality of pre-generated encryption keys to a plurality of lifetime key management devices (LKMs) that are in communication with the first security appliance, wherein the plurality of LKMs distribute the plurality of pre-generated encryption keys to other security appliances; receiving a re-key command for the ciphertext at the first security appliance coupled to the storage system, and in response thereto, reading the stored ciphertext from the storage system; decrypting the stored ciphertext using old keys to produce clear text; utilizing one of the plurality of pre-generated encryption keys and encrypting the clear text to produce re-encrypted ciphertext; writing the re-encrypted ciphertext to the storage system; and communicating the utilization of the pre-generated encryption key to the LKMs in communication with the first security appliance, and to the other security appliances by the plurality of LKMs.