Patent ID: 8185751
Filing Date: 2012-05-22
Classification: H04L

Abstract:
1. A data storage apparatus available to at least one client via a network, comprising: a file server capable of communication with the client via the network; physical storage including blocks of data; an encryption device in communication with both the file server and the physical storage, the encryption device enabled to store one or more mappings of an indication of a range of blocks of data on the physical storage to an encryption key; wherein the indication indicates a start position and an end position of the blocks on the physical storage to be encrypted; wherein the encryption device is operable in response to signaling from the file server, the signaling including an indication from the file server of a range of the blocks of data on the physical storage on the storage apparatus, wherein the indication from the file server indicates a start position and an end position of the blocks on the physical storage to be encrypted, to cause the encryption device to encrypt the range of blocks of data on the physical storage with an encryption key that is unique to the mapping of the indicated block range to the physical storage, and wherein the encryption device is operable to store the pairing of the range of blocks and the encryption key wherein the file server includes at least one nested table indicative of a mapping of component ID to block range.