Patent ID: 8111828

Claim:
A system for securing stored data, comprising: a storage system to: receive storage and retrieval requests; in response to the storage request received at the storage system, issue, to a management system, an encryption request including an address of the storage system; in response to the encryption request, receive, from the management system, an encryption reply including a current cryptographic key and an identifier of the current cryptographic key within a sequence of cryptographic keys for the storage system; encrypt data of the storage request into encrypted data using the current cryptographic key; store the encrypted data and the identifier in a storage media; in response to the retrieval request received at the storage system, retrieve encrypted data and a particular identifier from the storage media; in response to the retrieval request received at the storage system, issue, to the management system, a decryption request including the particular identifier retrieved from the storage media and the address of the storage system; receive, from the management system in response to the decryption request, a decryption reply including a cryptographic key corresponding to the particular identifier within the sequence for the storage system; and decrypt the retrieved encrypted data using the cryptographic key in the decryption reply.