Method for selectively performing a secure data erase to ensure timely erasure

Patent metadata

Field	Value
Publication number	US-9542109-B2
Application number	US-201514794742-A
Country	US
Kind code	B2
Filing date	Jul 8, 2015
Priority date	Apr 19, 2007
Publication date	Jan 10, 2017
Grant date	Jan 10, 2017

Abstract

A method and computer program product are provided to ensure a timely secure data erase by determining an erasure deadline for each physical volume of a plurality of physical volumes and calculating a remaining time for each physical volume. The remaining time is calculated for each physical volume by comparing a current date to the erasure deadline of each physical volume respectively. A secure data erase is performed on the plurality of physical volumes in an order based on the calculated remaining time, where the secure data erase is performed on the physical volume with a shortest calculated remaining time first.

First claim

What is claimed is:

1. A computer-implemented method comprising:
determining an erasure deadline for at least two physical volumes of a plurality of physical volumes;
calculating a remaining time for each said physical volume by comparing a current date to said erasure deadline of each said physical volume, respectively; and
performing a secure data erase on said plurality of physical volumes prior to said erasure deadline in an order based on said calculated remaining time, wherein said secure data erase is performed on said physical volume with a shortest calculated remaining time first.

2. The method of claim 1 , wherein said secure data erase comprises overwriting data of said physical volume.

3. The method of claim 2 , wherein said overwriting comprises overwriting said data of said physical volume one or more times utilizing a data pattern that contains one of logical ones, zeroes, or some combination thereof.

4. The method of claim 1 , wherein said remaining time is calculated by a difference between said erasure deadline of said physical volume and said current date.

5. The method of claim 1 , wherein said plurality of physical volumes are sorted based on said remaining time.

6. The method of claim 1 , wherein said erasure deadline is defined by a customer.

7. The method of claim 1 , further comprising determining a quantity of physical volumes to be secure data erased.

8. The method of claim 7 , wherein said determining said quantity of physical volumes to be secure data erased comprises evaluating each said physical volume of said plurality of physical volumes.

9. The method of claim 8 , wherein said evaluating comprises:
comparing said current date to an expiration date of said physical volume;
in response to said current date of said physical volume being greater than said expiration date, determining if said physical volume is available for said secure data erase;
in response to said physical volume being available for said secure data erase, performing said calculating of remaining time; and
in response to said remaining time being less than a time threshold, incrementing a count for a count of said quantity of physical volumes to be secure data erased.

10. A computer program product comprising a non-transitory computer readable storage medium comprising:
a computer readable program wherein said computer readable program when executed on a computer causes the computer to:
determine an erasure deadline for at least two physical volumes of a plurality of physical volumes;
calculate a remaining time for each said physical volume by comparing a current date to said erasure deadline of each said physical volume, respectively, the erasure deadline of each physical volume being later than said current date; and
selectively perform a secure data erase on said plurality of physical volumes in an order based on said calculated remaining time, wherein said secure data erase is performed on said physical volume with a shortest calculated remaining time first.

11. The computer program product of claim 10 , wherein said secure data erase comprises overwriting data of said physical volume.

12. The computer program product of claim 11 , wherein said overwriting comprises overwriting said data of said physical volume one or more times utilizing a data pattern that contains one of logical ones, zeroes, or some combination thereof.

13. The computer program product of claim 10 , further configured to determine said remaining time by calculating a difference between said erasure deadline of said physical volume and said current date.

14. The computer program product of claim 10 , further configured to sort said plurality of physical volumes based on said remaining time.

15. The computer program product of claim 10 , wherein said erasure deadline is defined by a customer.

16. The computer program product of claim 10 , further configured to determine a quantity of physical volumes to be secure data erased.

17. The computer program product of claim 16 , further configured to determine said quantity of physical volumes to be secure data erased by evaluating each said physical volume of said plurality of physical volumes.

18. The computer program product of claim 17 , wherein said evaluating each of said physical volume of said plurality of physical volumes comprises:
comparing said current date to an expiration date of said physical volume;
in response to said current date of said physical volume being greater than said expiration date, determining if said physical volume is available for said secure data erase;
in response to said physical volume being available for said secure data erase, performing said calculating of remaining time; and
in response to said remaining time being less than a time threshold, incrementing a count for a count of said quantity of physical volumes to be secure data erased.

Assignees

• IBM

Inventors

• Kishi Gregory Tad
• Norman Mark Allan
• Ostasiewski Laura Jean
• Sansone Christopher Michael

Classifications

• G06F3/0665

  at area level, e.g. provisioning of virtual or logical volumes · CPC title

• G06F3/0631

  by allocating resources to storage systems · CPC title

• G06F2221/2137

  Time limited access, e.g. to a computer or data · CPC title

• G06F3/0682

  Tape device · CPC title

• G06F2221/2143

  Clearing memory, e.g. to prevent the data from being stolen · CPC title