Management of encrypted storage media
AssigneeInternational Business Machines Corporation
InventorsMichael Factor, Dalit Naor, Adam Wolman, Aviad Zlotnick
Life of this patent
Estimating the term…
Abstract
A method for use of a physical data storage medium, the method including receiving a first read request for data stored in any of a plurality of storage sub-units on a physical data storage medium, and decrypting the requested data if an indicator associated with the requested data storage sub-unit indicates that data in the requested storage sub-unit is encrypted.
Claims29
A method for use of a physical data storage medium, the method comprising:
- receiving a first read request for data stored in any of a plurality of storage sub-units on a physical data storage medium;
- and
- decrypting said requested data if an indicator associated with said requested data storage sub-unit indicates that data in said requested storage sub-unit is encrypted.
A method for use of a physical data storage medium, the method comprising:
- encrypting, at a first physical location, data for storage in a plurality of storage sub-units on a physical data storage medium;
- transporting said encrypted physical data storage medium to a second physical location;
- receiving a first read request for data stored in any of said data storage sub-units on said encrypted physical data storage medium;
- and
- decrypting said requested data if an indicator associated with said requested data storage sub-unit indicates that data in said requested storage sub-unit is encrypted.
A system for secure use of physical data storage media, the system comprising:
- an at least partially encrypted data storage medium storing data in any of a plurality of storage sub-units;
- a plurality of indicators, each indicator corresponding to one of said storage sub-units and indicating whether data in said storage sub-unit is encrypted;
- and
- a storage control unit configured to:
- receive read requests for data stored in one of said storage sub-units on said encrypted data storage medium prior to said data storage medium being decrypted,
- consult said block's corresponding indicator to determine whether said requested data is encrypted, and
- decrypt said data if said requested data is encrypted.
A computer-implemented program embodied on a computer-readable medium, the computer program comprising:
- a first code segment operative to receive a first read request for data stored in any of a plurality of storage sub-units on a physical data storage medium;
- and
- a second code segment operative to decrypt said requested data if an indicator associated with said requested data storage sub-unit indicates that data in said requested storage sub-unit is encrypted.
Dependencies are inferred from the claim text.