Patent ID: 9160526
Filing Date: 2015-10-13
Classification: G06F,H04L

Abstract:
1. A method, performed in a device, the method comprising: receiving key identification information from a key controller module on an external host; obtaining a key identified by the key identification information from an external key server; decrypting encrypted data from an encrypted storage system using the key; and processing the decrypted data; wherein receiving key identification information from the key controller module includes: receiving an associate command from the key controller module on the external host, the associate command including: an opcode field set to a value that indicates that the establishment of an association is being attempted; the key identification information, the key identification information including a key identifier, the key identifier serving to identify the key without directly revealing the key; and a set of fields, the set of fields identifying a set of data ranges subject to encryption; and sending an associate response to the key controller module on the external host in response to the associate command, the associate response including: a response field set to a value that indicates whether the association has been successfully established; and a handle field set to a handle value identifying the established association.