| 摘要 |
<p>An apparatus comprises a storage device 102 and a host device 105. The storage device is configured to encrypt and decrypt user data during write and read operations, respectively. The host device is configured to communicatively couple to the storage device, and to execute the write and read operations by concentrating a first number of virtual bands into a smaller second number of real bands. The host device may comprise a virtual machine manager 120, which may comprise one or more virtual band managers 122, which may map a number of virtual bands to one or more real bands. The bands may be data bands comprising logical block address ranges. The storage device may comprise a band manager 110 configured to store key material 114. A media encryption key for each real data band may be generated by wrapping an authentication key 104 with the corresponding key material (341 in Figure 3). The invention facilitates the alleviation of band limitation issues for a self encrypting drive in an environment hosting many virtual machines.</p> |
