Abstract: A method for operating a storage array, the method includes analyzing a read request to identify an encrypted metadata folder associated with a volume of the storage array, obtaining a per-volume key for the volume, decrypting the encrypted metadata folder to obtain a metadata folder using the per-volume key, analyzing the metadata folder to identify a metadata file of a data chunk of data, extracting a per-chunk key associated with the data chunk from the metadata file, identifying storage location information of the data chunk based on a hash value lookup table, decrypting the data chunk using the per-chunk key to obtain a decrypted data chunk, decompressing the decrypted data chunk to obtain a decompressed data chunk (DDC), and initiating transmission of the DDC to the client.

Abstract: A method for operating a storage array includes: generating a per-chunk key and a deduplication key for a data chunk based on a hash value, wherein the per-chunk key is stored in a metadata file; obtaining a per-volume key for a volume of the storage array; encrypting a metadata folder associated with the volume to generate an encrypted metadata folder using the per-volume key, in which the encrypted metadata folder comprises at least the metadata file; compressing the data chunk to generate a compressed data chunk (CDC); encrypting the CDC to generate an encrypted compressed data chunk (ECDC) using the per-chunk key, in which the ECDC is stored in the volume; obtaining storage location information of the ECDC; updating a hash value lookup table based on the storage location information; and initiating notification of a user of a client about completion of a write request.

Abstract: A method, computer program product, and computing system for receiving content for securely transmitting from an initiator device across a fabric to a target device. The content may be encrypted with a predefined encryption key, thus defining encrypted content. The encrypted content may be encapsulated in a Non-volatile Memory Express (NVMe) Over Fabrics (NVMe-oF) command, thus defining an encapsulated NVMe-oF security command. The encapsulated NVMe-oF security command may be transmitted across the fabric to the target device.

Abstract: A method for operating a storage array includes: generating a per-chunk key and a deduplication key for a data chunk based on a hash value, wherein the per-chunk key is stored in a metadata file; obtaining a per-volume key for a volume of the storage array; encrypting a metadata folder associated with the volume to generate an encrypted metadata folder using the per-volume key, in which the encrypted metadata folder comprises at least the metadata file; compressing the data chunk to generate a compressed data chunk (CDC); encrypting the CDC to generate an encrypted compressed data chunk (ECDC) using the per-chunk key, in which the ECDC is stored in the volume; obtaining storage location information of the ECDC; updating a hash value lookup table based on the storage location information; and initiating notification of a user of a client about completion of a write request.

Abstract: A method, computer program product, and computing system for receiving content for securely transmitting from an initiator device across a fabric to a target device. The content may be encrypted with a predefined encryption key, thus defining encrypted content. The encrypted content may be encapsulated in a Non-volatile Memory Express (NVMe) Over Fabrics (NVMe-oF) command, thus defining an encapsulated NVMe-oF security command. The encapsulated NVMe-oF security command may be transmitted across the fabric to the target device.