Patents by Inventor Masoud Sadrolashrafi

Masoud Sadrolashrafi has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Management of encryption agents in data storage systems
    Patent number: 11563555
    Abstract: A method for managing keys and encrypting data is provided. The method includes receiving data to be written to a logical disk, generating an encryption table indicating one or more locations on the logical disk for storing the data and indicating a key used for encrypting the data, encrypting the data to be written to the logical disk, and transmitting the encrypted data and the encryption table to a storage array.
    Type: Grant
    Filed: August 22, 2018
    Date of Patent: January 24, 2023
    Assignee: THALES DIS CPL USA, INC.
    Inventors: Vishnu Rangayyan, Masoud Sadrolashrafi, Peter Tsai
  • MANAGEMENT OF ENCRYPTION AGENTS IN DATA STORAGE SYSTEMS
    Publication number: 20190097789
    Abstract: A method for managing keys and encrypting data is provided. The method includes receiving data to be written to a logical disk, generating an encryption table indicating one or more locations on the logical disk for storing the data and indicating a key used for encrypting the data, encrypting the data to be written to the logical disk, and transmitting the encrypted data and the encryption table to a storage array.
    Type: Application
    Filed: August 22, 2018
    Publication date: March 28, 2019
    Inventors: Vishnu Rangayyan, Masoud Sadrolashrafi, Peter Tsai
  • DATA ENCRYPTION KEY SHARING FOR A STORAGE SYSTEM
    Publication number: 20180034787
    Abstract: A method for key sharing with a storage system, performed by a network device or security manager is provided. The method includes sharing a first key with a host system and sharing the first key with a storage system. The host system encrypts a file or data with the first key and sends the encrypted file or data to the storage system. The storage system decrypts the encrypted file or data with the first key, compresses the decrypted file or data, and re-encrypts the decrypted file or data.
    Type: Application
    Filed: August 1, 2016
    Publication date: February 1, 2018
    Inventors: Ashvin Kamaraju, Masoud Sadrolashrafi, Sridharan Sudarsan, I-Ching Wang
  • Encryption solution for protecting file systems in multi-host clusters
    Patent number: 9202077
    Abstract: A method of managing file security in a cluster environment is provided. The method includes passing a request for a file from a secure file system layer to a secure volume manager layer and locking at least a portion of the file as affected by the request, at a cluster file system layer. The method includes passing one or more keys from the secure file system layer to the secure volume manager layer. The method includes decrypting the file as received, in response to the request for the file including a read request for the file, prior to sending the decrypted file to the secure file system layer. The method includes encrypting the file as received, in response to the request for the file including a write request for the file, prior to sending the encrypted file to the input/output layer.
    Type: Grant
    Filed: August 30, 2013
    Date of Patent: December 1, 2015
    Assignee: Vormetric, Inc.
    Inventor: Masoud Sadrolashrafi
  • ENCRYPTION SOLUTION FOR PROTECTING FILE SYSTEMS IN MULTI-HOST CLUSTERS
    Publication number: 20140325214
    Abstract: A method of managing file security in a cluster environment is provided. The method includes passing a request for a file from a secure file system layer to a secure volume manager layer and locking at least a portion of the file as affected by the request, at a cluster file system layer. The method includes passing one or more keys from the secure file system layer to the secure volume manager layer. The method includes decrypting the file as received, in response to the request for the file including a read request for the file, prior to sending the decrypted file to the secure file system layer. The method includes encrypting the file as received, in response to the request for the file including a write request for the file, prior to sending the encrypted file to the input/output layer.
    Type: Application
    Filed: August 30, 2013
    Publication date: October 30, 2014
    Applicant: Vormetric, Inc.
    Inventor: Masoud Sadrolashrafi