Storage system, storage control apparatus, and storage control method

摘要

A storage system in which a storage control apparatus writes data in each of divided areas defined by division of one or more storage areas in one or more storage devices, after encryption of the data with an encryption key unique to each divided area. When the storage control apparatus receives, from a management apparatus, designation of one or more of the divided areas allocated as one or more physical storage areas for a virtual storage area to be invalidated and an instruction to invalidate data stored in the one or more of the divided areas, the storage control apparatus invalidates one or more encryption keys associated with the designated one or more of the divided areas. In addition, the storage control apparatus may further overwrite at least part of the designated one or more of the divided areas with initialization data for data erasion.

主权项

1. A storage control apparatus comprising:
a physical memory configured to store encryption-key information including encryption keys respectively associated with divided areas defined by division of one or more storage areas in one or more storage devices; and a physical processor configured to perform a procedure including,
acquiring from the encryption-key information one of the encryption keys associated with one of the divided areas in which data is to be written, encrypting the data to be written, by use of the one of the encryption keys, to generate encrypted data, and writing the encrypted data in the one of the divided areas, andinvalidating one or more of the encryption keys associated with one or more of the divided areas and included in the encryption-key information when the storage control apparatus receives, from a management apparatus, designation of the one or more of the divided areas and an instruction to invalidate data stored in the one or more of the divided areas, and the one or more of the divided areas are allocated as one or more physical storage areas for a virtual storage area to be invalidated.