Patent ID: 9055052
Filing Date: 2015-06-09
Classification: G06F,H04L

Abstract:
1. A method of improving storage security in a cloud environment comprising: interfacing a secure microcontroller with a storage controller associated with a client device in the cloud environment to authenticate a platform associated with the storage controller; registering the storage controller with an authentication server configured to be set up in the cloud environment; authenticating the storage controller based on a communication protocol between the client device, the authentication server and the storage controller; and obtaining, at the client device, a signature data of the storage controller following the authentication thereof, the signature data being configured to be stored in the secure microcontroller interfaced with the storage controller, wherein authenticating the storage controller includes: requesting the authentication server to attest the storage controller through a cloud manager of the cloud environment configured to provision storage therein; transmitting an authentication request from the authentication server to the storage controller with a nonce and the signature data of the authentication server encrypted using a private key; decrypting the encrypted nonce and the signature data of the authentication server at the storage controller using a public portion of a key shared between the authentication server and the storage controller; transmitting the signature data of the storage controller from the authentication server to the cloud manager when the signature data of the storage controller is matched in a database associated with the authentication server, and when the nonce is matched in decrypted content at the authentication server; and transmitting the signature data of the storage controller from the cloud manager to the client device.