Patent Application
20090119752
The present invention relates generally to encryption and authentication, and more specifically, to a method and system for the transparent encryption and authentication of file data in networked storage environments. Merely by way of example, the invention has been applied to a storage area network. But it would be recognized that the invention has a much broader range of applicability.
Encryption techniques are known. Certain conventional encryption techniques include Transparent Cryptographic File System, commonly called TCFS, and those known as Encrypted File System by Microsoft Corporation of Redmond, Wash., and Veritas Netbackup software by Veritas Software Corporation. Although these techniques have had some success, there are still many limitations. Specific limitations about each of these products are provided throughout the present specification and more particularly below.
Veritas backup encryption option is embedded in Veritas Netbackup software. It often requires new software to be installed on each client and also requires CPU intensive functions such as encryption to be performed on each Netbackup client. Further, this option leaves encryption keys on the clients, making the whole process not very secure. Accordingly, Veritas Netbackup software has limitations.
Microsoft EFS (Encrypted File System) has many benefits. It works well with Windows™ software based clients by Microsoft Corporation. Unfortunately, it only works for Windows clients and is basically an extension of the Windows NT/2000 Filesystem developed by Microsoft Corporation. It often requires CPU intensive functions such as encryption to be performed on each Windows client using EFS. Accordingly, EFS is limited.
TCFS is another example of an encryption tool, which has an encryption technique. It often works only for NFS (Network File Systems by Sun Microsystems, Inc. of Santa Clara, Calif.) clients, which makes TCFS limited. It also requires CPU intensive functions such as encryption to be performed on each NFS client. Although TCFS has had some success, it still has many limitations.
There is, therefore, a need for a system and method that provides encryption services transparent of the application, operating system and file system.
According to the present invention, techniques for encryption and authentication are provided. More specifically, the invention provides a method and system for the transparent encryption and authentication of file data in networked storage environments. Merely by way of example, the invention has been applied to a storage area network. But it would be recognized that the invention has a much broader range of applicability.
In a specific embodiment, the invention provides a method processing one or more files using a security application. The method includes a method processing one or more files using a security application. The method includes connecting the client to a proxy server, which is coupled to one or more NAS (i.e., network attached storage) servers. The method includes requesting for a file from a client to the proxy server and authenticating a requesting user of the client. The method also includes authorizing the requesting user for the file requested; requesting for the file from the one or more NAS servers after authenticating and authorizing; and requesting for the file from the one or more storage elements. The file is transferred from the one or more storage elements through the NAS server to the proxy server. The method determines header information on the file at the proxy server and identifies a policy based upon the header information at the proxy server. The header information comprises elements such as, but not limited to, a time stamp, Encrypted Data Encrypted Key and Encrypted Data Hash MAC key (encrypted with Policy Key Encryption Key), File attributes (e.g., owner-id, access-permissions, access times, policy identifier etc.). The Header is hashed using the Policy Hash MAC key in certain embodiments. The method also includes processing (e.g., decompressing the file, decrypting (e.g., NIST, AES-128, AES-192, AES-256, Triple-DES) the file, and verifying the file) the file according to the policy. The method includes transferring the processed file to the user of the client.
In an alternative specific embodiment, the invention provides a system for providing security on a network attached storage. A directed proxy server is coupled to a databus, which is coupled to a plurality of clients. The directed proxy server is adapted to add header information and to add trailer information on a file by file basis. The directed proxy server is adapted to provide policy information on either or both the header information and the trailer information. A NAS server is coupled to the directed proxy server. One or more storage devices is coupled to the filer.
In yet an alternative specific embodiment, the invention provides a method processing one or more files using a security application. The method includes connecting a security device to a NAS server, which is coupled to one or more storage elements. The method also includes detecting one or more changed files on the NAS server; detecting one or more portions of the one or more files that have been changed; and determining a policy information for at least one of the changed files to determine a security attribute information. The method includes generating header information for the changed file; attaching the header information on the changed file; and processing at least one portion of the changed file according to the policy information. The processing includes compressing the portion; encrypting the portion; and generating one or more message authentication codes associated with the portion of the changed file. The method includes transferring the changed file to one or more of the storage elements.
Still further, the present invention provides method processing one or more files using a security application. The method includes connecting the client to proxy server, which is coupled to one or more NAS servers. The method includes transferring a file from a client to the proxy server and authenticating a user of the client. The method includes authorizing the user for the file requested; processing the file using a keyed message authentication integrity process (which may have a key size of at least 128 bits or less or larger); and generating header information for the file. Header information is attached on the file. The method includes transferring the file to one or more of the NAS servers and transferring the file from the one or more NAS servers to one or more storage elements.
Still further, the invention provides an alternative method processing one or more files using a security application. The method includes connecting the client to server, which is coupled to one or more storage elements. The method also includes transferring a file from a client to the server; authenticating a user of the client; and authorizing the user for the file requested. The method includes processing the file using a keyed message authentication integrity process and generating header information for the file. The header information is attached on the file. The method also transfers the file to one or more of the storage elements.
Numerous benefits exist with the present invention over conventional techniques. In a specific embodiment, the invention provides a way to secure data stored at a NAS server irrespective of the native format that the data was originally stored in. Most other techniques are intrusive requiring changes to either native data format (as in EFS) or changes to client system (as in TCFS). This invention achieves high security, strong integrity, compression capability, file tamper detection and strong time based archival capabilities at high data rates.
The invention can also be implemented using conventional software and hardware technologies. Preferably, the invention provides suitable software and hardware features to process services at wirespeed, e.g., 1 Gigabit per second and greater. Depending upon the embodiment, one or more of these benefits or features can be achieved. These and other benefits are described throughout the present specification and more particularly below.
The accompanying drawings, which are incorporated in and form part of the specification, illustrate embodiments of the invention and, together with the description, serves to explain the principles of the invention.
According to the present invention, techniques for encryption and authentication are provided. More specifically, the invention provides a method and system for the transparent encryption and authentication of file data in networked storage environments. Merely by way of example, the invention has been applied to a storage area network. But it would be recognized that the invention has a much broader range of applicability.
A system and method for transparently securing file data protocols over Internet Protocol (IP) are disclosed herein. The system and method provide transparent encryption, integrity, and compression for files (or other file related datasets) in primary, nearline or secondary storage environments. The system may be used, for example, to backup and restore applications, in primary storage environments, and nearline storage environments which provide a high-performance staging area for backup applications. The invention is delivered as a hardened security appliance which transparently intercepts file protocol control and data streams (either as a directed or transparent proxy) and applies security policies to datasets which are being transferred. The invention uses deep inspection of the file protocols to perform on-the-fly crypto operations on the data using keys which are securely stored in NVRAM (Non-Volatile Random Access Memory) of the tamper-proof appliance. The invention may use, for example, hardware based TCP off-load processing and off the shelf crypto chips to provide strong performance.
Embodiments of the present invention may include one or more of the following features:
A system of the present invention (referred to herein as ‘CryptoStor for Files’ or ‘appliance’) acts as a proxy for the file protocol server(s). The file system protocol clients are either configured to point to the CryptoStor for Files box or the CryptoStor for Files transparently intercepts file protocol requests. The intercepted control and data streams from the client are serviced by the system which examines each protocol message and uses the configured policies to determine the appropriate security policies that are applied to the message. The appliance may intercept, for example, Novell NCP, NFS and CIFS protocols.
The system acts as a proxy for the backup server(s). Protocols processed include NDMP, Veritas Netbackup, Veritas Backup Exec, Legato's Networker, CIFS, NFS, Novell NCP, and other IP protocols used for backup/restore. The appliance functions for both client as well as server initiated backups, and full as well as incremental backups of files, directories, partitions, etc.
In both environments, the system transparently stores some meta-data along with the file data or file attributes. The meta-data relates to key management, length of the original file/dataset, whether the file was compressed prior to encryption or not, integrity checks for file data. The meta-data is stripped off before the file data/file attributes are returned to the client. The system proxies the authentication function, if authentication is enabled on the client. The system can also detect whether client side compression is enabled (in backup/restore environments), and therefore selectively apply compression.
Referring to
In one embodiment, encryption is done using symmetric algorithms with strong keys, for example, 3DES or AES with 128 bit keys. Keyed SHA-1 or Keyed MD-5 are preferred Integrity check algo. By default, all actions are encrypt.
Re-keying policy indicates interval when new keys are generated and data re-encrypted with new key. This may be different for different volumes/directories depending on volatility and criticality of data in that directory.
The Key Database holds the actual Key values. Keys are not stored in the clear. Instead they are stored under the envelope of a SuperKey which is escrowed. The system supports smart card interface to store the Keys securely. Further details of systems and methods according to embodiments of the present invention can be found throughout the present specification and more particularly below.
Referring to
Preferably, the above system is for providing security on a network attached storage. A directed proxy server is coupled to a databus, which is coupled to a plurality of clients. The directed proxy server is adapted to add header information and to add trailer information on a file by file basis. The header information comprises elements such as, but not limited to, a time stamp, Encrypted Data Encrypted Key and Encrypted Data Hash MAC key (encrypted with Policy Key Encryption Key), File attributes (e.g., owner-id, access-permissions, access times, policy identifier etc.). The Header is hashed using the Policy Hash MAC key in certain embodiments. The directed proxy server is adapted to provide policy information on either or both the header information and the trailer information. A NAS server is coupled to the directed proxy server. One or more storage devices is coupled to the filer. Depending upon the embodiment, there can be other variations, alternatives, and modifications.
An example of data according to the present invention can be found in
A method processing one or more files using a security application according to an embodiment of the present invention may be outlined as follows:
1. Attempt to connect the client to a proxy server, which is coupled to one or more NAS servers;
2. Connect the client to the proxy server;
3. Requesting for a file from a client to the proxy server;
4. Authenticate a requesting user of the client;
5. Authorize the requesting user for the file requested;
6. Request for the file from the one or more NAS servers after authenticating and authorizing;
7. Request for the file from the one or more storage elements;
8. Transfer the file from the one or more storage elements through the NAS server to the proxy server;
9. Determine header information on the file at the proxy server;
10. Identify a policy based upon the header information at the proxy server;
11. Process (e.g., decompress, decrypt, encrypt, verify) the file according to the policy; and
12. Transfer the processed file to the user of the client.
As shown, the above sequence of steps provides a method according to an embodiment of the present invention. Such method can be used to process network data information using a variety of processes, e.g., encrypt, decompress, verify, decrypt. Depending upon the embodiment, certain steps can be combined or further separated. Certain steps may be reordered and/or other steps may be added. Of course, one of ordinary skill in the art would recognize many variations, modifications, and alternatives. A specific illustration of the present method can be illustrated by way of one or more of the Figures below, see
A method processing one or more files using a security application according to an embodiment of the present invention may be provided as follows:
1. Connect a security device to a NAS server, which is coupled to one or more storage elements;
2. Detect one or more changed files on the NAS server;
3. Detect one or more portions of the one or more files that have been changed;
4. Determine a policy information for at least one of the changed files to determine a security attribute information;
5. Generate header information for the changed file;
6. Attach the header information on the changed file;
7. Process (e.g., compress, encrypt) at least one portion of the changed file according to the policy information;
8. Generate one or more message authentication codes associated with the portion of the changed file;
9. Transfer the changed file to one or more of the storage elements; and
10. Perform other steps, as desired.
As shown, the above sequence of steps provides a method according to an embodiment of the present invention. Such method can be used to process network data information using a variety of processes, e.g., encrypt, decompress, verify, decrypt. Depending upon the embodiment, certain steps can be combined or further separated. Certain steps may be reordered and/or other steps may be added. Of course, one of ordinary skill in the art would recognize many variations, modifications, and alternatives. A specific illustration of the present method can be illustrated by way of one or more of the Figures below, see
A method processing one or more files using a security application according to an embodiment of the present invention may be outlined as follows:
1. Connect a client to server, which is coupled to one or more storage elements;
2. Transfer a file from a client to the server;
3. Authenticate a user of the client;
4. Authorize the user for the file requested;
5. Process the file using a keyed message authentication integrity process (e.g., SHA-1, MD-5, SHA-512;
6. Generate header information for the file;
7. Attach the header information on the file;
8. Transfer the file to one or more of the storage elements; and
9. Perform other steps, as desired.
As shown, the above sequence of steps provides a method according to an embodiment of the present invention. Such method can be used to process network data information using a variety of processes. Depending upon the embodiment, certain steps can be combined or further separated. Certain steps may be reordered and/or other steps may be added. Of course, one of ordinary skill in the art would recognize many variations, modifications, and alternatives. A specific illustration of the present method can be illustrated by way of one or more of the Figures below, see
A method for providing secured storage of data according to an embodiment of the present invention may be identified below.
1. Provide a key encryption key;
2. Store the key encryption key on a system;
3. Store a message authentication code generating key on the system;
4. Decrypt a file encryption key with the key encryption key;
5. Decrypt a file message authentication code generating key with the key encryption key;
6. Use the file encryption key to decrypt data stored on a server or encrypt data originated by a user on a client;
7. Generate a message authentication code for a header of the file with the message authentication code generating key;
8. Use the file message authentication code generating key to generate one or more message authentication codes block by block in the file; and
9. Perform other steps, as desired.
As shown, the above sequence of steps provides a method according to an embodiment of the present invention. Such method can be used to process network data information using a variety of processes. Depending upon the embodiment, certain steps can be combined or further separated. Certain steps may be reordered and/or other steps may be added. Of course, one of ordinary skill in the art would recognize many variations, modifications, and alternatives. A specific illustration of the present method can be illustrated by way of one or more of the Figures below, see
Although the present invention has been described in accordance with the embodiments shown, one of ordinary skill in the art will readily recognize that there could be variations made to the embodiments without departing from the scope of the present invention. Accordingly, it is intended that all matter contained in the above description and shown in the accompanying drawings shall be interpreted as illustrative and not in a limiting sense.
This application claims priority to U.S. patent application Ser. No. 10/688,204 filed Oct. 17, 2003, which claims priority to U.S. Provisional Application No. 60/419,654 filed Oct. 18, 2002, hereby incorporated by reference for all purposes.
| Number | Date | Country | |
|---|---|---|---|
| 60419654 | Oct 2002 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 10688204 | Oct 2003 | US |
| Child | 11947623 | US |
