Method and system for encrypting files based on security rules

A method for encrypting files based on security rules, comprising:

• receiving a request to store a tape file comprising backup data on a tape storage device;
• identifying at least one security parameter associated with a security profile of the tape file;
• identifying at least one storage parameter associated with the tape file, wherein the at least one storage parameter comprises a parameter indicative of a name of the tape file;
• determining whether to encrypt the tape file by applying at least one security rule to the at least one security parameter, the at least one security rule being defined by a security administrator and identifying whether the tape file should be encrypted based on who is allowed to access the file;
• determining whether to encrypt the tape file by applying at least one storage rule to the at least one storage parameter, wherein the at least one storage rule is defined by a backup product operable to provide storage management of the up backup data, the set of storage rules external to the at least one security rule;
• encrypting the tape file if the at least one security rule indicates the tape file should be encrypted;
• and
• storing the tape file on the tape storage device;
• wherein encrypting the tape file if the at least one security rule indicates the tape file should be encrypted further comprises encrypting the tape file if the at least one security rule defined by the security administrator indicates the tape file should be encrypted and the at least one storage rule defined by the storage product indicates the tape file should not be encrypted.

A system for encrypting files based on security rules, comprising:

• a storage device;
• and
• a processor, the processor operable to execute a program of instructions operable to:
• receive a request to store a tape file comprising backup data on a tape storage device;
• maintain a set of storage rules that are defined by a backup product operable to provide storage management of the up backup data, the set of storage rules identifying selection criteria for determining whether to encrypt the file based on at least one storage parameter associated with the storage of the file;
• maintain a set of security rules identifying selection criteria for determining whether to encrypt the tape file based on at least one security parameter associated with a security profile associated with the tape file comprising the backup data, wherein the set of security rules are external to the set of storage rules and are defined by a security administrator, wherein the set of security rules identify whether the tape file should be encrypted based on who is allowed to access the file;
• in response to applying the set of storage rules to the file parameter, determine that the tape file should not be encrypted;
• in response to applying the set of security rules to the security parameter, determine that the tape file should be encrypted based on a permission setting identifying who is allowed to access the file;
• in response to applying both the set of storage rules and the set of security rules, encrypt the tape file such that preference is given to the at least one security rule defined by, the security administrator over the at least on storage rule defined by the backup product where the set of storage rules identify that the tape file should not be encrypted and the set of security rules identify that the tap file should be encrypted;
• and
• store the tape file on the tape storage device.

A non-transitory computer-readable medium encoded with logic, the logic being operable, when executed on a processor, to:

• receive a request to store a tape file comprising backup data on a tape storage device;
• maintain a set of storage rules that are defined by a backup product operable to provide storage management of the up backup data, the set of storage rules identifying selection criteria for determining whether to encrypt the tape file based on at least one storage parameter associated with the storage of the tape file comprising the backup data;
• maintain a set of security rules identifying selection criteria for determining whether to encrypt the tape file based on at least one security parameter associated with a security profile associated with the tape file comprising the backup data, wherein the set of security rules are external to the set of storage rules and are defined by a security administrator, wherein the set of security rules identify whether the tape file should be encrypted based on who is allowed to access the file;
• in response to applying the set of storage rules to the at least one storage parameter associated with the tape file, determine that the tape file should not be encrypted;
• in response to applying the set of security rules to the at least one security parameter associated with the tape file, determine that the tape file should be encrypted based on a permission setting identifying who is allowed to access the file;
• in response to applying both the set of storage rules and the set of security rules, encrypt the tape file such that preference is given to the at least one security rule defined by the security administrator over the at least on storage rule defined by the backup product where the set of storage rules identify that the tape file should not be encrypted and the set of security rules identify that the tap file should be encrypted;
• and
• store the tape file on the tape storage device.