Storage provisioning

Patent metadata

Field	Value
Publication number	US-12462045-B2
Application number	US-202017796363-A
Country	US
Kind code	B2
Filing date	Feb 7, 2020
Priority date	Feb 7, 2020
Publication date	Nov 4, 2025
Grant date	Nov 4, 2025

Abstract

There is provided a method performed by a first storage provisioning node of a system for provisioning storage in the system. In response to a first request for an encrypted storage volume for an application node, transmission of a second request is initiated ( 20 ) towards a second storage provisioning node for an unencrypted storage volume. In response to the requested unencrypted storage volume becoming available to the first storage provisioning node, an encrypted storage volume is generated ( 22 ) from the unencrypted storage volume and provisioning of the encrypted storage volume is initiated ( 24 ) to make the encrypted storage volume available at a compute node of the system for use by the application node.

First claim

The invention claimed is:

1 . A method performed by a first storage provisioning node of a system for provisioning storage in the system, the method comprising:
in response to a first request for an encrypted storage volume for an application node, initiating transmission of a second request towards a second storage provisioning node for an unencrypted storage volume; and in response to the requested unencrypted storage volume becoming available to the first storage provisioning node, generating an encrypted storage volume from the unencrypted storage volume and initiating provisioning of the encrypted storage volume to make the encrypted storage volume available at a compute node of the system for use by the application node.

2 . The method of claim 1 , wherein initiating provisioning of the encrypted storage volume comprises initiating mounting of the encrypted storage volume to the compute node to make the encrypted storage volume available at the compute node for use by the application node.

3 . The method of claim 2 , wherein initiating mounting of the encrypted storage volume to the compute node comprises initiating mounting of the encrypted storage volume to a directory tree of the compute node.

4 . The method of claim 1 , wherein initiating provisioning of the encrypted storage volume comprises initiating provisioning of the encrypted storage volume on the first storage provisioning node to make the encrypted storage volume available at the compute node.

5 . The method of claim 1 , further comprising initiating transmission of a third request towards the second storage provisioning node to cease making the unencrypted storage volume available at the compute node.

6 . The method of claim 1 , further comprising, in response to a fourth request to cease making the encrypted storage volume available at the compute node, initiating the ceasing of making the encrypted storage volume available at the compute node.

7 . The method of claim 1 , wherein the encrypted storage volume is generated by applying an encrypted layer to the unencrypted storage volume.

8 . The method of claim 7 , wherein the encrypted layer is an encrypted file system layer.

9 . A first storage provisioning node of a system, the first storage provisioning node comprising:
processing circuitry configured to:
in response to a first request for an encrypted storage volume for an application node, initiate transmission of a second request towards a second storage provisioning node for an unencrypted storage volume; and
in response to the requested unencrypted storage volume becoming available to the first storage provisioning node, generate an encrypted storage volume from the unencrypted storage volume and initiate provisioning of the encrypted storage volume to make the encrypted storage volume available at a compute node of the system for use by the application node.

10 . The first storage provisioning node of claim 9 , wherein the processing circuitry is configured to initiate provisioning of the encrypted storage volume by initiating mounting of the encrypted storage volume to the compute node to make the encrypted storage volume available at the compute node for use by the application node.

11 . The first storage provisioning node of claim 10 , wherein the processing circuitry is configured to initiate mounting of the encrypted storage volume to the compute node by initiating mounting of the encrypted storage volume to a directory tree of the compute node.

12 . The first storage provisioning node of claim 11 , wherein the processing circuitry is configured to initiate provisioning of the encrypted storage volume by initiating provisioning of the encrypted storage volume on the first storage provisioning node to make the encrypted storage volume available at the compute node.

13 . The first storage provisioning node of claim 11 , wherein the processing circuitry is further configured to initiate transmission of a third request towards the second storage provisioning node to cease making the unencrypted storage volume available at the compute node.

14 . The first storage provisioning node of claim 11 , wherein the processing circuitry is further configured to, in response to a fourth request to cease making the encrypted storage volume available at the compute node, initiate the ceasing of making the encrypted storage volume available at the compute node.

15 . The first storage provisioning node of claim 11 , wherein the encrypted storage volume is generated by applying an encrypted layer to the unencrypted storage volume.

16 . The first storage provisioning node of claim 15 , wherein the encrypted layer is an encrypted file system layer.

17 . A second storage provisioning node of a system for provisioning storage in the system, the second storage provisioning node comprising:
processing circuitry configured to, in response to a second request from a first storage provisioning node of the system for an unencrypted storage volume, initiate provisioning of the unencrypted storage volume to make the unencrypted storage volume available at a compute node of the system to the first storage provisioning node for the first storage provisioning node to use in the generation of an encrypted storage volume to be made available at the compute node for use by an application node.

18 . The second storage provisioning node of claim 17 , wherein the processing circuitry is configured to initiate provisioning of the unencrypted storage volume by initiating mounting of the unencrypted storage volume to the compute node to make the unencrypted storage volume available to the first storage provisioning node.

19 . A compute node of a system for provisioning storage in the system, the compute node comprising:
processing circuitry configured to:
provision an unencrypted storage volume requested by a first storage provisioning node to make the unencrypted storage volume available at the compute node to the first storage provisioning node for the first storage provisioning node to use in the generation of an encrypted storage volume; and
provision the encrypted storage volume generated by the first storage provisioning node to make the encrypted storage volume available at the compute node for use by an application node.

20 . The compute node of claim 19 , wherein the processing circuitry is configured to:
provision the unencrypted storage volume by generating a container on which to make the unencrypted storage volume available at the compute node; and/or provision the encrypted storage volume by provisioning the encrypted storage volume on the first storage provisioning node to make the encrypted storage volume available at the compute node.

Assignees

• Ericsson Telefon Ab L M

Inventors

• Speks Oliver
• Quinet Raphael
• Hermanns Nikolas
• Kunz Georg

Classifications

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F3/0673

  Single storage device · CPC title

• G06F3/0655

  Vertical data movement, i.e. input-output transfer; data movement between one or more hosts and one or more storage devices · CPC title

• G06F3/0622

  in relation to access · CPC title

• H04L67/1097

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title