System and service to facilitate encryption in data storage devices
AssigneeInternational Business Machines Corporation
InventorsAllen K. Bates, Nhan X. Bui, Brian G. Goodman, Daniel J. Winarski
Life of this patent
Estimating the term…
Abstract
An encryption communications appliance provides data encryption management for a data storage library. The appliance is coupled to an encryption-capable storage device, a data storage library controller within the data storage library and with an encryption key manager (EKM). The encryption command communications appliance intercepts encryption key requests from the data storage device and transparently forwards the requests to the EKM. The appliance also forwards transparently communications between the library controller and the data storage device.
Claims16
An encryption command communications appliance for an automated data storage library, the appliance comprising:
- a first interface coupled with an encryption key manager (EKM);
- a first library-drive interface (LDI) coupled with a data storage library controller, the library controller comprising a first host interface coupled to a host device;
- a second LDI coupled with an encryption-capable data storage device, the encryption-capable storage device comprising a second host interface coupled to the host device and having no interface coupled to the library controller;
- and
- a controller coupled to the first interface and the first second LDIs to permit the encryption-capable data storage device to communicate with the EKM without communicating with the library controller;
- the appliance being operable to:
- intercept encryption commands and data from the encryption-capable data storage device and forward the requests to the EKM through the second LDI the first interface;
- intercept encryption commands and data from the EKM and forward the requests to the encryption-capable data storage device through the first interface and the second LDI;
- and
- forward communications between the library controller and the encryption-capable data storage device through first and second LDIs.
A data storage library, comprising:
- a library controller having a first host interface coupled to a host device;
- an encryption-capable storage device having a second host interface coupled to the host device an having no interface coupled to the library controller;
- and
- an encryption command communications appliance, comprising:
- a first interface coupled to an encryption key manager (EKM);
- a second interface coupled to the library controller;
- a third interface coupled to the encryption-capable storage device;
- and
- an appliance controller coupled to the first, second, and third interfaces to permit the encryption-capable storage device to communicate with the EKM without communicating with the library controller,
- the appliance controller being operable to:
- intercept encryption commands and data from the encryption-capable data storage device and forward the requests to the EKM through the third and first interfaces;
- intercept encryption commands and data from the EKM and forward the requests to the encryption-capable data storage device through the first and third interfaces;
- and
- forward communications between the library controller and the encryption-capable data storage device through the second and third interfaces.
Dependencies are inferred from the claim text.