Efficient elimination of access to data on a writable storage media

Patent metadata

Field	Value
Publication number	US-9299385-B2
Application number	US-84090707-A
Country	US
Kind code	B2
Filing date	Aug 17, 2007
Priority date	Aug 17, 2007
Publication date	Mar 29, 2016
Grant date	Mar 29, 2016

Abstract

A method and computer program product are provided for eliminating access to data within a writable storage media cartridge. If it is determined if at least a first portion of data on the writable storage media is encrypted then a second portion of data within the writable storage media cartridge related to said encrypted first portion of data is shredded. The first portion of data and the second portion are not the same portions of the writable storage media cartridge.

First claim

What is claimed is:

1. A method for eliminating access to data within a writable storage media cartridge comprising:
determining that a first portion of data on said writable storage media cartridge is encrypted;
determining whether key shredding is enabled;
in response to determining that key shredding is not enabled, performing a long erase on at least the encrypted first portion of data; and
shredding an encryption key related to said encrypted first portion of data.

2. The method of claim 1 , further comprising determining that at least another portion of said writable storage media cartridge is not encrypted, and, in response, determining if a previous long erase has been completed on writable storage media of said writable storage media cartridge.

3. The method of claim 2 , further comprising performing said long erase on said writable storage media of said writable storage media cartridge in response to determining that said previous long erase has not been completed on said writable storage media of said writable storage media cartridge.

4. The method of claim 3 , wherein said long erase is performed on said at least another portion of said writable storage media of said writable storage media cartridge.

5. The method of claim 3 , further comprising updating a database in response to performing said long erase.

6. The method of claim 3 , wherein said long erase is performed before said shredding of said encryption key.

7. The method of claim 3 , wherein said long erase is performed after said shredding of said encryption key.

8. The method of claim 1 , wherein said encryption key that is shredded is on said writable storage media cartridge.

9. The method of claim 1 , wherein said writable storage media cartridge is a tape cartridge, and wherein said tape cartridge comprises tape media and a cartridge memory.

10. The method of claim 9 , wherein said tape media comprises a non-user portion and said encryption key is stored on said non-user portion.

11. The method of claim 9 , wherein said encryption key is stored on said cartridge memory.

12. The method of claim 1 , wherein said shredding comprises overwriting said encryption key one or more times utilizing a data pattern that contains one of logical ones, zeroes, or some combination thereof.

13. A method comprising:
eliminating access to data on tape media of a tape cartridge, wherein said tape media includes at least one portion of encrypted data, wherein said eliminating access comprises:
determining whether key shredding is enabled for eliminating access to the data on said tape media;
in response to determining that key shredding is not enabled, performing a long erase on said at least one portion of encrypted data on said tape cartridge;
shredding at least one encryption key from said tape cartridge corresponding to said at least one portion of encrypted data; and
performing a long erase on remaining data on said tape media that does not include said at least one portion of encrypted data.

14. The method of claim 13 , wherein said tape cartridge comprises a cartridge memory, wherein said at least one encryption key is stored in said cartridge memory.

15. The method of claim 13 , wherein said encryption key is shredded in response to determining that key shredding is not enabled.

16. The method of claim 13 , wherein said at least one encryption key is stored on said tape media.

17. The method of claim 13 , comprising receiving a command from a user to enable key shredding for a subsequent operation.

18. The method of claim 13 , wherein said shredding comprises overwriting said at least one encryption key one or more times utilizing a data pattern that contains one of logical ones, zeroes, or some combination thereof.

19. The method of claim 13 , further comprising updating a database in response to performing said long erase.

20. The method of claim 13 , wherein said long erase is performed before said shredding said at least one encryption key.

21. The method of claim 13 , wherein said long erase is performed after said shredding said at least one encryption key.

22. A computer program product comprising a non-transitory computer useable storage media, said computer useable storage media having program instructions embodied therewith, said program instructions executable by a computer to cause said computer to perform a method comprising:
determining that at least a first portion of data on a writable storage media cartridge is encrypted;
shredding at least one encryption key from said writable storage media cartridge corresponding to said at least one portion of encrypted data;
performing a long erase on remaining data on said writable storage media cartridge that does not include said at least one portion of encrypted data;
determining whether key shredding is enabled; and
in response to determining that key shredding is not enabled, perform the long erase on said first portion of the data,
wherein the encryption key is shredded in response to determining that key shredding is not enabled.

23. The computer program product of claim 22 , comprising computer instructions that cause said computer to determine that at least another portion of said writable storage media cartridge is not encrypted, and, in response, determining if a previous long erase has been completed on writable storage media of said writable storage media cartridge.

24. The computer program product of claim 23 , comprising computer instructions that cause said computer to perform a long erase on said writable storage media of said writable storage media cartridge in response to determining that said previous long erase had not been completed on said writable storage media of said writable storage media cartridge.

25. The computer program product of claim 24 , wherein said long erase is performed on said at least another portion of said writable storage media of said writable storage media cartridge.

26. The computer program product of claim 24 , comprising computer instructions that cause said computer to update updating a database in response to performing said long erase.

27. The computer program product of claim 22 , wherein said writable storage media cartridge is a tape cartridge, and wherein said tape cartridge comprises tape media and cartridge memory.

28. The computer program product of claim 27 , wherein said tape media comprises a non-user portion and said encryption key is stored on said non-user portion.

29. The computer program product of claim 27 , wherein said encryption key is stored on said cartridge memory.

30. The computer program product of claim 22 , wherein said shredding comprises overwriting said encryption key one or more times utilizing a data pattern that contains one of logical ones, zeroes, or some combination thereof.

31. A computer program product comprising a non-transitory computer useable storage media, said computer useable storage media having program instructions embodied therewith, said program instructions executable by a computer to cause said computer to perform a method comprising:
eliminating access to data on tape media of a tape cartridge, wherein said tape media includes at least one portion of encrypted data, wherein said eliminating access comprises:
shredding at least one encryption key from said tape cartr

Assignees

• Carlson Wayne Charles
• Friauf Cheryl Marie
• Kishi Gregory Tad
• Lee Duke Andy
• Peake Jonathan Wayne
• IBM

Inventors

• Carlson Wayne Charles
• Friauf Cheryl Marie
• Kishi Gregory Tad
• Lee Duke Andy
• Peake Jonathan Wayne

Classifications

• G11B20/00086 Primary

  Circuits for prevention of unauthorised reproduction or copying, e.g. piracy (indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00) · CPC title

• G06F3/0652

  Erasing, e.g. deleting, data cleaning, moving of data to a wastebasket · CPC title

• G06F3/0619 Primary

  in relation to data integrity, e.g. data losses, bit errors · CPC title

• G06F12/1408

  by using cryptography (for digital transmission H04L9/00) · CPC title

• H04L9/06

  the encryption apparatus using shift registers or memories for block-wise {or stream} coding, e.g. DES systems {or RC4; Hash functions; Pseudorandom sequence generators} · CPC title