Data Storage Drive Target of Opportunity Recognition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current automated data storage libraries require resource-intensive operations for tasks like tape cartridge mounting and key sessions, which can impact system performance, and often lack the ability to perform additional operations during these processes, such as media checks or rekeying, due to inefficient resource allocation and lack of integration with key management systems.
Innovation Solution
The concept of 'target of opportunity' allows for the performance of additional operations, like media checks, rekeying, or diagnostics, during the mounting or key session processes, utilizing existing resources efficiently and transparently, by recognizing opportunities for concurrent tasks during routine operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If resource-intensive operations are performed for tape cartridge mounting and key sessions, then security and data protection are improved, but system performance deteriorates
Solution Approach 1:
The system performs media checks and other preparatory operations during the tape cartridge mounting process, before actual data access is required. This preliminary action ensures data protection measures are in place without delaying critical data operations, as the media is already verified when needed.
Solution Approach 2:
The system maintains continuous operation by performing key session operations and media checks during already-scheduled mounting processes. Rather than interrupting data operations for security checks, the security operations continue concurrently during the natural mounting workflow, maintaining system productivity while ensuring data protection.
2Productivity
If additional operations like media checks and rekeying are performed during mounting, then system efficiency is improved, but resource allocation complexity increases
Solution Approach 1:
The mounting process is designed to serve multiple functions simultaneously: it not only loads the tape cartridge but also performs media checks, verifies encryption keys, and prepares the media for data operations. This multi-functionality consolidates what would otherwise be separate operations into a single unified process, improving efficiency without proportionally increasing complexity.
Solution Approach 2:
The system automatically performs media checks and key verification during mounting without requiring separate manual interventions. The mounting process itself triggers and completes these additional operations autonomously, allowing the system to serve its own security and preparation needs without external resource allocation complexity.
3Adaptability or versatility
If key management system integration is implemented for target of opportunity operations, then operational versatility is improved, but system complexity increases
Solution Approach 1:
The key management system serves as an intermediary that coordinates target of opportunity operations with the main storage system. Rather than directly integrating all functionality into the storage hardware, the key management system acts as a mediator that handles key sessions, media checks, and rekeying operations, providing operational versatility while isolating system complexity into a dedicated management layer.
Data Source
AI summary
A method according to one embodiment includes receiving a request to store data on media, and generating a data key. An encryption encapsulated data key is generated using the data key. A session encrypted data key is generated using the data key. The encryption encapsulated data key and session encrypted data key are provided for use in writing encrypted data to the media. A method according to another embodiment includes receiving a request to read data from media, and receiving an encryption encapsulated data key. The encryption encapsulated data key is processed to obtain a data key. A session encrypted data key is generated using the data key. The encryption encapsulated data key and session encrypted data key are provided for use in reading the encrypted data from the media.