Encrypt data of storage device

Abstract

A request from a host is received requesting data from a storage device. Data of the storage device is written into a buffer of the host. The data at the buffer is to be encrypted and written back to the storage device. The requested data of the request is written to the buffer after the encrypted data is written back to the storage device.

We claim: 
     
         1 . A computing device comprising:
 an interface to receive a request from a host device requesting data from a storage device;   a transfer device to, in response to the request, retrieve plaintext data from the storage device and to write the plaintext data retrieved from the storage device into a buffer of the host device; and   an encryptor to, in response to the request, receive the plaintext buffer from the buffer of the host device and to encrypt the received plaintext data, the encryptor to write the encrypted data to the storage device,   the interface to, in response to the writing of the encrypted data to the storage device, respond to the request by writing requested data of the request to the buffer of the host device.   
     
     
         2 . The computing device of  claim 1 , wherein the writing of the plaintext data into the buffer of the host device is part of a technique to dynamically borrow the buffer of the host device to store the plaintext data that is not the requested data of the request. 
     
     
         3 . The computing device of  claim 1 , wherein the plaintext data is not the requested data of the request. 
     
     
         4 . The computing device of  claim 1 , wherein the transfer device is to:
 store a progress of writing the encrypted data to the storage device at a non-volatile memory, and   reference the stored progress in response to a power failure occurring at the computing device before all of the encrypted data is written to the storage device.   
     
     
         5 . The computing device of  claim 1 , wherein an amount of the plaintext data written to the buffer is based on a size allocated for the buffer by the host device for the requested data of the request. 
     
     
         6 . The computing device of  claim 1 , wherein the transfer device is to send a complete message after the requested data is written to the buffer, to indicate to the host device that the request is completed. 
     
     
         7 . The computing device of  claim 1 , wherein,
 the request relates to at least one of read and sense type requests, and   the request does not relate to a write type request.   
     
     
         8 . The computing device of  claim 1 , wherein the transfer device is to retrieve the plaintext data at least one of sequentially and iteratively from the storage device. 
     
     
         9 . The computing device of  claim 1 , wherein the computing device comprises a storage device controller. 
     
     
         10 . The computing device of  claim 1 , wherein the computing device is to communicate with the storage device over a Serial Attached SCSI connection, and to communicate with the host device over an Internet Protocol connection or a Peripheral Component Interconnect connection. 
     
     
         11 . A method comprising:
 receiving, by a computing device, a request from a host device requesting data from a storage device;   in response to the request, retrieving, by the computing device, plaintext data from the storage device;   writing, by the computing device, the plaintext data retrieved from the storage device into a buffer of the host device;   in response to the request, receiving, by the computing device, the plaintext buffer from the buffer of the host device and encrypting the received plaintext data;   writing, by the computing device, the encrypted data to the storage device; and   in response to the writing of the encrypted data to the storage device, responding, by the computing device, to the request by writing requested data of the request to the buffer of the host device.   
     
     
         12 . The method of  claim 11 , wherein the writing of the plaintext data into the buffer of the host device is part of a technique to dynamically borrow the buffer of the host device to store the plaintext data that is not the requested data of the request. 
     
     
         13 . The method of  claim 11 , wherein the plaintext data is not the requested data of the request. 
     
     
         14 . The method of  claim 11 , wherein:
 the request is active while the plaintext data is being written to and read from the buffer, and   the request is completed after the requested data is written to the buffer.   
     
     
         15 . The method of  claim 11 , wherein the plaintext data includes iteratively read blocks of the plaintext data of a disk of a storage volume of the storage device. 
     
     
         16 . A non-transitory computer-readable storage medium storing instructions that, if executed by a processor of a computing device, cause the computing device to:
 receive a request from a host device requesting data from a storage device;   in response to the request, retrieve plaintext data from the storage device;   write the plaintext data retrieved from the storage device into a buffer of the host device;   in response to the request, receive the plaintext buffer from the buffer of the host device and encrypt the received plaintext data;   write the encrypted data to the storage device; and   in response to the writing of the encrypted data to the storage device, respond to the request by writing requested data of the request to the buffer of the host device.   
     
     
         17 . The non-transitory computer-readable storage medium of  claim 16 , wherein the writing of the plaintext data into the buffer of the host device is part of a technique to dynamically borrow the buffer of the host device to store the plaintext data that is not the requested data of the request. 
     
     
         18 . The non-transitory computer-readable storage medium of  claim 16 , wherein the plaintext data is not the requested data of the request. 
     
     
         19 . The non-transitory computer-readable storage medium of  claim 16 , wherein the instructions upon execution cause the computing device to:
 store, at a non-volatile memory, a progress of writing the encrypted data to the storage device; and   reference the stored progress in response to a power failure occurring at the computing device before all of the encrypted data is written to the storage device.