Partitionable Data Storage Library Encryption Controller
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Managing encryption keys for multiple mobile media in data storage libraries is complex and time-consuming, especially when different clients have varying encryption requirements, making it challenging to ensure data security and integrity.
Innovation Solution
A data storage library with a combination bridge controller device that partitions the storage into multiple sections, encrypts data packages, and associates them with a unique decryption key and message authentication code (MAC) for secure storage on mobile media, allowing for flexible key management and enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data encryption is implemented for all mobile media in the library, then data security is improved, but key management complexity and time consumption increase significantly
Solution Approach 1:
The library is divided into multiple partitions, each with its own encryption key. This segmentation allows different security policies to be applied to different partitions, reducing the overall key management complexity while maintaining security. The controller can manage encryption on a partition-by-partition basis rather than requiring a single key for the entire library.
Solution Approach 2:
Encryption is applied selectively to specific partitions or mobile media based on local requirements rather than uniformly across the entire library. This allows clients to choose which partitions require encryption based on their specific security needs, reducing unnecessary key management overhead for non-sensitive data.
2Reliability
If encryption keys are changed frequently for each data set, then data security is improved, but time consumption for key management increases
Solution Approach 1:
Encryption keys are generated and associated with partitions in advance, before data storage operations begin. The controller pre-configures the encryption infrastructure for each partition, so that when data needs to be encrypted, the key is already available and no time-consuming key generation or management operations are required during actual data operations.
3Adaptability or versatility
If data encryption is made optional for different clients, then adaptability to client needs is improved, but system complexity increases
Solution Approach 1:
The encryption capability is made dynamic and configurable at the partition level. Clients can dynamically choose which partitions require encryption based on their specific needs. The controller adapts its behavior based on client preferences and data sensitivity, allowing encryption to be enabled or disabled for specific partitions without requiring different system architectures for different clients.
Data Source
AI summary
Disclosed are a method and apparatus for a data storage library comprising a first and second drive, a first and second mobile medium, a first and second partition wherein the first partition comprises the first drive and the first mobile medium and the second partition comprises the second drive and the second mobile medium, and a combination bridge controller device. The combination bridge controller device is configurable to control first communication traffic between at least a first client and the first partition wherein the first communication traffic can comprise a first data package. The combination bridge controller device is further configurable to optionally encrypt the first data package for storage on the first mobile medium when the first mobile medium is in cooperation with the first drive.