File access control on magnetic tape by encrypting metadata

A computer program product for encrypting metadata on a magnetic tape, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program instructions readable and/or executable by a processor to cause the processor to perform a method comprising:

• writing, by the processor, an index to a magnetic tape, wherein the index includes:
• metadata corresponding to a plurality of files stored on the magnetic tape, and metadata corresponding to a directory structure of the plurality of files;
• using, by the processor, a first key to encrypt a first portion of the metadata in the index corresponding to the plurality of files;
• and
• using, by the processor, a second key to encrypt a first portion of the metadata in the index corresponding to the directory structure of the plurality of files.

A computer-implemented method, comprising:

• receiving an access request for data stored on a magnetic tape, wherein the magnetic tape includes an index having metadata corresponding to files stored on the magnetic tape and metadata corresponding to a directory structure of the files, wherein at least some of the metadata corresponding to the files stored on the magnetic tape is encrypted with a first key, wherein at least some of the metadata corresponding to the directory structure of the files is encrypted with a second key;
• receiving a key corresponding to a particular entity;
• using the received key to decrypt a portion of the encrypted metadata in the index of the magnetic tape;
• and
• outputting a resulting file, wherein the resulting file is based on the portion of the metadata in the index of the magnetic tape decrypted by the received key.