Patent ID: 7461267
Filing Date: 2008-12-02
Classification: G06F,H04L

Abstract:
1. A storage system configured to be coupled to a host computer via a network, the storage system comprising: a storage having at least one physical storage device; an encrypted data area in the storage, the encrypted data area comprising data encrypted with a first encryption key; a re-encrypted data area in the storage, the re-encrypted data area comprising data encrypted with a second encryption key; and a controller coupled to the storage, wherein the controller maintains re-encryption progress information for distinguishing between the encrypted data area and the re-encrypted data area, updates the re-encryption progress information by decryption of the data stored in the encrypted data area using the first encryption key and encryption of the decrypted data using the second encryption key, and processes a read request from the host computer via the network with one of the first encryption key or the second encryption key based on the re-encryption progress information, wherein said read request is received while said controller performs decryption and subsequent encryption of the data.