Patent ID: 8098824

Claim:
A storage system comprising: a first storage apparatus operatively connected to a host computer; and a second storage apparatus operatively connected to the first storage apparatus, wherein the first storage apparatus includes a first controller and a first disk drive controlled by the first controller, the first disk drive provided with a first data volume and a first journal volume, wherein the first controller includes a first encryption management table for managing an encryption status and an encryption key for each of the first data volume and the first journal volume, wherein when the first controller receives a write request from the host computer, the first controller: creates a journal based on data according to the write request, encrypts the created journal in accordance with the encryption status and the encryption key for the first journal volume that are managed by the first encryption management table, stores the encrypted journal in an area in the first journal volume, reads and decrypts the encrypted journal stored in the first journal volume, and transmits the decrypted journal to the second storage apparatus, and wherein when the first controller receives an encryption key update request for the first journal volume from a management apparatus connected to the first storage apparatus, the first controller secures a new journal volume and generates a new encryption key for the new journal volume.