Method and apparatus for virtually erasing data from WORM storage devices
AssigneeInternational Business Machines Corporation
InventorStephen P. Legg
Life of this patent
Estimating the term…
Abstract
A storage device capable of selectively rendering certain data irretrievable is disclosed. The storage device includes Write Once Read Many (WORM) storage medium, a key generator, an encrypted write component, an erasable storage medium and a key deleter. The WORM storage medium is capable of storing data, and the data stored in the WORM data storage medium are unerasable and unrewritable. The key generator provides a generated key that can be stored in the erasable storage medium. The encrypted write component writes a set of sensitive data encrypted by using the generated key to the WORM storage medium. In response to a request for deleting the set of sensitive data from the WORM storage medium, the key deleter deletes the generated key from the erasable storage medium.
Claims12
A storage system for selectively rendering certain data irretrievable, said storage system comprising:
- a tape cartridge comprising:
- a Write Once Read Many (WORM) tape for storing an encrypted first set of data including an associated first key and an encrypted second set of data including an associated second key, wherein the first set of data and the second set of data are non-erasable and non-rewritable on the WORM tape, and
- a radio frequency identification (RFID) chip comprising an erasable storage device including a relatively small amount of storage capacity, said RFID chip for identifying said tape cartridge coupled to said WORM tape, said erasable storage device storing said first key and said second key;
- a programmed key generator for generating the first key and generating the second key;
- a programmed encrypted write component coupled to said WORM tape and said programmed key generator, said programmed encrypted write component for writing said encrypted first set of data via said first key to said WORM tape and for writing said encrypted second set of data via said second key to said WORM tape;
- and
- a programmed key deleter coupled to said RFID chip, said programmed key deleter for deleting said first key from said erasable storage device while maintaining accessibility to said encrypted second set of data on said WORM tape via said second key in response to a request for deleting said encrypted first set of data from said WORM tape, wherein:
- said encrypted first set of data remains written on said WORM tape,
- retrieval of unencrypted data from said encrypted first set of data via said deleted first key is computationally infeasible subsequent to deleting said first key, and
- retrieval of unencrypted data from said encrypted second set of data on said WORM tape via said second key remains feasible subsequent to deleting said first key.
A method for storing data and selectively rendering said data computationally infeasible of retrieval in a tape cartridge comprising a Write Once Read Many (WORM) tape, a radio frequency identification (RFID) chip for identifying said tape cartridge, said RFID chip comprising an erasable storage device including a relatively small amount of storage capacity for storing encryption keys, said tape cartridge configured for coupling to an encryption component, a key generator, a key storer, and a key deleter, said method comprising:
- generating, via said key generator, a first key associated with a first set of data;
- generating, via said key generator, a second key associated with a second set of data;
- using said first key to encrypt and write, via said encryption component, said first set of data to said WORM tape;
- using said second key to encrypt and write, via said encryption component, said second set of data to said WORM tape;
- storing, via said key storer, said first key and said second key in said erasable storage device on said RFID chip;
- and
- in response to a request for deleting said encrypted first set of data from said WORM tape, deleting, via said key deleter, said first key from said erasable storage device of the RFID chip while maintaining accessibility to said second set of data on said WORM tape via said second key, wherein:
- said encrypted first set of data remains written on said WORM tape,
- retrieval of unencrypted data from said encrypted first set of data via said deleted first key is computationally infeasible subsequent to deleting said first key, and
- retrieval of said encrypted second set of data on said WORM tape via said second key remains feasible subsequent to deleting said first key.
A computer-readable memory including a computer program product for storing data and selectively rendering said data computationally infeasible of retrieval in a tape cartridge comprising a Write Once Read Many (WORM) tape and a radio frequency identification (RFID) chip for identifying said tape cartridge, said RFID chip comprising an erasable storage device including a relatively small amount of storage capacity for storing encryption keys, said tape cartridge configured for coupling to an encryption component, a key generator, a key storer, and a key deleter, said computer-readable memory comprising:
- program code configured to generate a first key associated with a first set of data;
- program code configured to generate a second key associated with a second set of data;
- program code configured to use said first key to encrypt and write said first set of data to said WORM tape;
- program code configured to use said second key to encrypt and write said second set of data to said WORM tape;
- program code configured to store said first key and said second key in said erasable storage device on said RFID chip;
- and
- in response to a request for deleting said first encrypted set of data from said WORM tape, program code configured to delete said first key from said erasable storage device of the RFID chip while maintaining accessibility to said encrypted second set of data on said WORM tape via said second key, wherein:
- said encrypted first set of data remains written on said WORM tape,
- retrieval of unencrypted data from said encrypted first set of data via said deleted first key is computationally infeasible subsequent to deleting said first key, and
- retrieval of said encrypted second set of data on said WORM tape via said second key remains feasible subsequent to deleting said first key.
Dependencies are inferred from the claim text.