Abstract: Apparatus and method for servicing data transfer commands in a computer environment using a selected protocol such as NVMe (Non-Volatile Memory Express). In some embodiments, a secure connection is established between a client device and a bridge device across an interface. A controller of the bridge device presents a unitary namespace as an available memory space to the client device. The controller further communicates with a plurality of downstream target devices to allocate individual namespaces within main memory stores of each of the target devices to form a consolidated namespace to support the unitary namespace presented to the controller. In this way, the bridge device can operate as an NVMe controller with respect to the client device for the unitary namespace, and as a virtual client device to each of the target devices which operate as embedded NVMe controllers for the individual namespaces.

Abstract: A data storage system can have one or more hosts connected to a data storage subsystem with the host having a host processor and the data storage subsystem having a controller. Write back data generated at the host triggers the host processor to allocate a cache location in the data storage subsystem where the generated data is subsequently stored. The generated write back data is written in a non-volatile destination address as directed by the controller prior to waiting for a secondary event with the generated data stored in both the cache location and the non-volatile destination address. Detection of the secondary event prompts the controller to signal the host processor that the cache location is free for new data.

Abstract: Implementations and methods herein provide a networked storage system including a plurality of physical storage devices configured to store data on a plurality of virtualized volumes, a key store configured to store a plurality of encryption keys, and a security manager configured to encrypt data stored on each of the plurality of virtualized volumes using a different key.

Abstract: A system that includes a cache memory, a counter, an encryption unit, and a logic block. The cache memory is configured to generate a plurality of data blocks. The cache memory outputs the plurality of data blocks responsive to a trigger signal. The counter unit is configured to generate a first plurality of nonrepeating data at a first instance in time. The logic block configured to perform a logic operation between a subset data blocks of the plurality of data blocks, received from the cache memory, and the first plurality of nonrepeating data in parallel, wherein the logic block is configured to generate a first logic data output. The encryption unit configured to encrypt the first logic data output using a first key.

Abstract: Implementations and methods herein provide a networked storage system including a plurality of physical storage devices configured to store data on a plurality of virtualized volumes, a key store configured to store a plurality of encryption keys, and a secure messaging manager configured to encrypt a message to each of the plurality of virtualized volumes using a different encryption key.

Abstract: A data storage system can have one or more hosts connected to a data storage subsystem with the host having a host processor and the data storage subsystem having a controller. Write back data generated at the host triggers the host processor to allocate a cache location in the data storage subsystem where the generated data is subsequently stored. The generated write back data is written in a non-volatile destination address as directed by the controller prior to waiting for a secondary event with the generated data stored in both the cache location and the non-volatile destination address. Detection of the secondary event prompts the controller to signal the host processor that the cache location is free for new data.

Abstract: Implementations and methods herein provide a networked storage system including a plurality of physical storage devices configured to store data on a plurality of virtualized volumes, a key store configured to store a plurality of encryption keys, and a security manager configured to encrypt data stored on each of the plurality of virtualized volumes using a different key.

Abstract: Implementations and methods herein provide a networked storage system including a plurality of physical storage devices configured to store data on a plurality of virtualized volumes, a key store configured to store a plurality of encryption keys, and a secure messaging manager configured to encrypt a message to each of the plurality of virtualized volumes using a different encryption key.