专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2008028768A1 STORING EEDKS TO TAPE OUTSIDE OF USER DATA AREA 审中-公开
标题翻译：存储用户数据区外的屏幕
公开(公告)号：WO2008028768A1
公开(公告)日：2008-03-13
申请号：PCT/EP2007/058433
申请日：2007-08-15
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , JAQUETTE, Glen, Alan , GRECO, Paul, Merrill
发明人： JAQUETTE, Glen, Alan , GRECO, Paul, Merrill
IPC分类号： G06F21/02
CPC分类号： G06F21/80
摘要： A method, system and program are provided for enabling access to encrypted data in a storage cartridge by wrapping the data key used to encrypt the data with one or more encryption keys (e.g., a public key from a public/private key pair) to form one or more encryption encapsulated data keys (EEDKs) and then storing the EEDK(s) on the storage cartridge along with the encrypted data in one or more location that are distinct from the encrypted data. The encrypted data may be decoded by retrieving the EEDK from the storage cartridge, decrypting the EEDK with a decryption key (e.g., the private key from the public/private key pair) to extract the underlying data key, and then using the extracted data key to decrypt the encrypted data. By storing the EEDKs separately from the encrypted data, the EEDKs may be updated independently of the corresponding encrypted data.
摘要翻译：提供了一种方法，系统和程序，用于通过用一个或多个加密密钥（例如，公共/私人密钥对的公共密钥）包裹用于加密数据的数据密钥来使得能够访问存储盒中的加密数据，以形成一个或多个加密封装数据密钥（EEDK），然后将EEDK与加密数据一起存储在与加密数据不同的一个或多个位置中。可以通过从存储盒检索EEDK来解密加密数据，使用解密密钥（例如，公/私钥对中的私钥）解密EEDK以提取底层数据密钥，然后使用提取的数据密钥解密加密数据。通过将EEDK与加密数据分开存储，EEDK可以独立于对应的加密数据进行更新。

2. 发明申请

WO2008028824A1 APPARATUS AND METHOD SUPPORTING INTEROPERABILITY OF AN ENCRYPTING STORAGE DEVICE WITH ENCRYPTION-UNAWARE APPLICATION PROGRAMS BY MEANS OF A DEVICE DRIVER COMMUNICATION TO A KEY MANAGER 审中-公开
标题翻译：装置和方法通过设备驱动程序通信给主要经理，支持加密存储设备与加密应用程序的互操作性
公开(公告)号：WO2008028824A1
公开(公告)日：2008-03-13
申请号：PCT/EP2007/058786
申请日：2007-08-23
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , GRECO, Paul, Merrill , JAQUETTE, Glen, Alan
发明人： GRECO, Paul, Merrill , JAQUETTE, Glen, Alan
IPC分类号： G06F21/00 , G06F3/00
CPC分类号： G06F3/0646 , G06F3/0623 , G06F3/0682 , G06F21/6281 , G06F21/80
摘要： A tape system is provided with an encryption capable tape drive and an encryption enabled tape drive device driver for the encryption capable tape drive. The encryption enabled tape drive device driver functions as a proxy which connects the encryption capable tape drive to a key manager which serves keys to the tape drive. When the encryption capable device driver causes a command to be sent to the drive, the tape drive is configured to respond with a message that is intended for a key manager such as an External Key Manager (EKM). The encryption capable device driver recognizes that this is a message intended for the EKM and forwards that message to the EKM (e.g., via an Internet Protocol (IP) connection). The EKM then responds to the key request by issuing a new key (for a new cartridge which is to be written from beginning of tape (BOT)) or an existing key (for a cartridge which needs to be read). The device driver connects all EKM responses to the encryption capable tape drive and the EKM from which the encryption capable tape drive obtains its keys.
摘要翻译：磁带系统提供有加密功能的磁带驱动器和用于加密功能的磁带驱动器的加密启用磁带驱动器设备驱动程序。启用加密的磁带驱动器设备驱动程序用作将加密功能的磁带驱动器连接到向磁带驱动器提供密钥的密钥管理器的代理。当具有加密能力的设备驱动程序导致将命令发送到驱动器时，磁带驱动器被配置为使用旨在用于诸如外部密钥管理器（EKM）的密钥管理器的消息。加密功能的设备驱动程序识别出这是用于EKM的消息，并将该消息转发到EKM（例如，经由因特网协议（IP）连接）。然后，EKM通过发出新的密钥（对于要从磁带开始写入的新墨盒（BOT））或现有密钥（对于需要读取的墨盒）来响应密钥请求。设备驱动程序将所有EKM响应连接到加密功能的磁带驱动器和可加密的磁带驱动器从其获得其密钥的EKM。

3. 发明申请

WO2004107158A2 MAGNETIC TAPE DATA STORAGE SYSTEM BUFFER MANAGEMENT 审中-公开
标题翻译：磁带数据存储系统缓冲器管理
公开(公告)号：WO2004107158A2
公开(公告)日：2004-12-09
申请号：PCT/EP2004/050771
申请日：2004-05-18
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , DAHMAN, Kirby, Grant , GRECO, Paul, Merrill , JAQUETTE, Glen, Alan
发明人： DAHMAN, Kirby, Grant , GRECO, Paul, Merrill , JAQUETTE, Glen, Alan
IPC分类号： G06F3/06
CPC分类号： G06F3/0682 , G06F3/0613 , G06F3/0656 , G11B5/00813 , G11B20/10527 , G11B2020/10703
摘要： A sequential buffer for a magnetic tape data storage system comprises a plurality of segments. A buffer management system buffers data in the sequential buffer, conducting a data transfer process. Subsequently, some of the buffered data is maintained in some, but less than all, the segments of the buffer. Additionally, the maintained buffered data is indicated as VALID data. Thus, a subsequent process may be conducted directly using the data maintained in the buffer, and avoids moving the tape to reread the data.
摘要翻译：用于磁带数据存储系统的顺序缓冲器包括多个段。缓冲器管理系统缓冲顺序缓冲器中的数据，进行数据传输过程。随后，一些缓冲的数据被保持在缓冲器的一些但是小于全部的段中。另外，维护的缓冲数据被指示为VALID数据。因此，可以使用缓冲器中保存的数据直接进行后续处理，并且避免移动磁带以重新读取数据。

4. 发明申请

WO2011110393A1 VOLUME COHERENCY VERIFICATION FOR SEQUENTIAL-ACCESS STORAGE MEDIA 审中-公开
标题翻译：用于顺序访问存储介质的容量验证
公开(公告)号：WO2011110393A1
公开(公告)日：2011-09-15
申请号：PCT/EP2011/051752
申请日：2011-02-07
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , BUTT, Kevin, Dale , GRECO, Paul, Merrill , JAQUETTE, Glen, Alan , SEGER, Paul
发明人： BUTT, Kevin, Dale , GRECO, Paul, Merrill , JAQUETTE, Glen, Alan , SEGER, Paul
IPC分类号： G11B27/11 , G11B27/36
CPC分类号： G06F3/0644 , G06F3/0611 , G06F3/0619 , G06F3/068 , G06F3/0682
摘要： A method for determining volume coherency is disclosed herein. Upon completing a first write job to a volume partition, the method makes a copy of a volume change reference (VCR) value associated with the volume. The VCR value is configured to change in a non-repeating manner each time content on the volume is modified. Prior to initiating a second write job to the volume partition, the method retrieves the copy and compares the copy to the VCR value. If the copy matches the VCR value, the method determines that a logical object on the partition was not modified between the first and second write jobs. If the copy does not match the VCR value, the method determines that the logical object on the partition was modified between the first and second write jobs. A corresponding system and computer program product are also disclosed herein.
摘要翻译：本文公开了一种用于确定卷一致性的方法。完成对卷分区的第一次写入作业后，该方法将创建与卷相关联的卷更改引用（VCR）值的副本。每次修改卷上的内容时，将VCR值配置为以不重复的方式进行更改。在向卷分区启动第二次写入作业之前，该方法将检索副本并将该副本与VCR值进行比较。如果复制与VCR值匹配，则该方法确定在第一和第二写入作业之间没有修改分区上的逻辑对象。如果副本与VCR值不匹配，则该方法确定分区上的逻辑对象在第一个和第二个写入作业之间已被修改。本文还公开了相应的系统和计算机程序产品。

5. 发明申请

WO2008132197A1 USE OF INDIRECT DATA KEYS FOR ENCRYPTED TAPE CARTRIDGES 审中-公开
标题翻译：使用加密胶卷盒的间接数据键
公开(公告)号：WO2008132197A1
公开(公告)日：2008-11-06
申请号：PCT/EP2008/055146
申请日：2008-04-28
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , GRECO, Paul, Merrill , HALEVI, Shai , JAQUETTE, Glen, Alan
发明人： GRECO, Paul, Merrill , HALEVI, Shai , JAQUETTE, Glen, Alan
IPC分类号： G11B20/00 , G06F21/00
CPC分类号： G11B20/00086 , G06F21/80 , G11B20/0021 , G11B20/00224 , G11B20/00333 , G11B2220/90
摘要： A method, system and program for enabling selective access to multiple users'encrypted data in a single storage cartridge. A unique, derived key is generated for each user's data by performing cryptographic operations on a combination of common base key and metadata related to the data to be encrypted (e.g. its total block count). The base data key is wrapped with one or more encryption keys to form one or more encryption encapsulated data keys (EEDKs). The base key and the derived key are wrapped to create a session encrypted data key (SEDK), which along with the EEDKs, are conveyed to the tape drive, where the SEDK is decrypted. The EEDKs are stored in one or more places on the storage cartridge. The base key and the derived key are used to encrypt a predetermined user's data, with the derived key stored on the cartridge with the encrypted data.
摘要翻译：一种用于在单个存储盒中选择性地访问多个用户的加密数据的方法，系统和程序。通过对与要加密的数据相关的公共基本密钥和元数据的组合（例如，其总块计数）执行加密操作，为每个用户的数据生成唯一的派生密钥。基本数据密钥用一个或多个加密密钥包裹以形成一个或多个加密封装数据密钥（EEDK）。基础密钥和派生密钥被包装以创建会话加密数据密钥（SEDK），其与EEDK一起被传送到SEDK被解密的磁带驱动器。 EEDK存储在存储盒上的一个或多个位置。基本密钥和派生密钥用于加密预定用户的数据，导出的密钥存储在盒上，并加密数据。

6. 发明申请

WO2008028864A1 CONFIGURING A STORAGE DRIVE TO COMMUNICATE WITH ENCRYPTION AND KEY MANAGERS 审中-公开
标题翻译：配置存储驱动程序与加密和关键管理器通信
公开(公告)号：WO2008028864A1
公开(公告)日：2008-03-13
申请号：PCT/EP2007/059094
申请日：2007-08-31
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , GOODMAN, Brian, Gerard , GRECO, Paul, Merrill , JAQUETTE, Glen, Alan , JESIONOWSKI, Leonard, George
发明人： GOODMAN, Brian, Gerard , GRECO, Paul, Merrill , JAQUETTE, Glen, Alan , JESIONOWSKI, Leonard, George
IPC分类号： G06F21/24 , G06F21/02
CPC分类号： G06F21/6218 , G06F21/78
摘要： Provided are a method, system, and article of manufacture for configuring a storage drive to communicate with encryption and key managers. A storage drive receives a request to access a coupled removable storage media for drive operations. The storage drive obtains encrypt ion status for the coupled removable storage media from an encryption manager. The storage drive determines from the obtained encryption status whether to encrypt the coupled removable storage media to access. The storage drive obtains at least one key from a key manager in response to determining to encrypt with respect to the coupled removable storage media. The storage drive performs data operations using the at least one key to encrypt data.
摘要翻译：提供了用于配置存储驱动器以与加密和密钥管理器进行通信的方法，系统和制品。存储驱动器接收访问用于驱动操作的耦合的可移动存储介质的请求。存储驱动器从加密管理器获得用于耦合的可移动存储介质的加密离子状态。存储驱动器根据所获得的加密状态确定是否加密耦合的可移动存储介质以进行访问。响应于确定相对于耦合的可移动存储介质进行加密，存储驱动器从密钥管理器获得至少一个密钥。存储驱动器使用至少一个密钥来执行数据操作以加密数据。

7. 发明申请

WO2008028766A1 DISTRIBUTED KEY STORE 审中-公开
标题翻译：分销商店
公开(公告)号：WO2008028766A1
公开(公告)日：2008-03-13
申请号：PCT/EP2007/058430
申请日：2007-08-15
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , JAQUETTE, Glen, Alan , GRECO, Paul, Merrill , HALEVI, Shai , RHOTEN, Wayne, Erwin
发明人： JAQUETTE, Glen, Alan , GRECO, Paul, Merrill , HALEVI, Shai , RHOTEN, Wayne, Erwin
IPC分类号： G06F21/02
CPC分类号： G06F21/80 , G06F2221/2121
摘要： A method, system and program are provided for enabling access to encrypted data in a storage cartridge by wrapping the data key used to encrypt the data with one or more encryption keys (e.g., a public key from a public/private key pair) to form one or more encryption encapsulated data keys (EEDKs) and then storing the EEDK(s) on the storage cartridge along with the encrypted data. The encrypted data may be decoded by retrieving the EEDK from the storage cartridge, decrypting the EEDK with a decryption key (e.g., the private key from the public/private key pair) to extract the underlying data key, and then using the extracted data key to decrypt the encrypted data.
摘要翻译：提供了一种方法，系统和程序，用于通过用一个或多个加密密钥（例如，公共/私人密钥对的公共密钥）包裹用于加密数据的数据密钥来使得能够访问存储盒中的加密数据，以形成一个或多个加密封装数据密钥（EEDK），然后将EEDK与加密数据一起存储在存储盒上。可以通过从存储盒检索EEDK来解密加密数据，使用解密密钥（例如，公/私钥对中的私钥）解密EEDK以提取底层数据密钥，然后使用提取的数据密钥解密加密数据。

8. 发明申请

WO2011088938A1 PAIRED PROGRAMMABLE FUSES 审中-公开
标题翻译：配对可编程熔丝
公开(公告)号：WO2011088938A1
公开(公告)日：2011-07-28
申请号：PCT/EP2010/070098
申请日：2010-12-17
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , BENTLEY, Steven, Ross , GRECO, Paul, Merrill
发明人： BENTLEY, Steven, Ross , GRECO, Paul, Merrill
IPC分类号： G11C17/16 , G11C16/22 , G11C17/18
CPC分类号： G11C17/16 , G11C16/22 , G11C17/18
摘要： A plurality of fuses (142, 152, 162, 172) are arranged in pairs and configured such that each pair of fuses represents a data bit when one fuse of the pair is blown (152, 162); represents an un-programmed bit when no fuse of the pair is blown (142); and represents a zero-ized bit when both fuses of the pair are blown (172). A fuse programming system programs the fuses of the pairs such that each pair represents a bit, comprising blowing a first fuse of a pair to represent a "1" bit (152), blowing a second fuse of a pair to represent a "0" bit (162), and blowing both fuses of a pair to represent a zero-ized pair (172), whereby if neither fuse of a pair is blown represents a null, un-programmed bit (142).
摘要翻译：多个保险丝（142,152,162,172）成对布置，并且配置为使得每对保险丝表示一对熔断器（152,162）时的数据位; 表示当一对熔丝没有被熔断时的未编程位（142）; 并且当两对熔丝熔断时（172）表示零位。熔丝编程系统对这些对的熔丝进行编程，使得每一对代表一个位，包括吹出一对的第一个熔丝以表示“1”位（152），吹出一对的第二个熔丝以表示“0” （162），并且吹送一对中的两个熔丝以表示零对（172），由此如果一对熔丝没有熔断，则表示空的未编程位（142）。

9. 发明申请

WO2012025492A1 REORDERING ACCESS TO REDUCE TOTAL SEEK TIME ON TAPE MEDIA 审中-公开
标题翻译：重新访问减少胶带介质上的总时间
公开(公告)号：WO2012025492A1
公开(公告)日：2012-03-01
申请号：PCT/EP2011/064389
申请日：2011-08-22
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , BUTT, Kevin, Dale , GRECO, Paul, Merrill , FRY, Scott, Milton , KATAGIRI, Takashi , OISHI, Yutaka
发明人： BUTT, Kevin, Dale , GRECO, Paul, Merrill , FRY, Scott, Milton , KATAGIRI, Takashi , OISHI, Yutaka
IPC分类号： G06F3/06
CPC分类号： G06F3/0659 , G06F3/061 , G06F3/0682 , G06F3/0686
摘要： A method, system and program are disclosed for reordering User Data Segment (UDS) lists to reduce seek times when accessing data stored on tape media. A host application sends a list of UDSs to a target tape drive and requests the tape drive to reorder the list to improve performance. An ordered list of target User data Segments to retrieve from a target tape media is received. Information about the location of each UDS on the target media is processed to determine its corresponding physical position on the tape media. The resulting physical positions are then processed to generate a reordered UDS list, where the order of the User Data Segments is reordered according to their physical location on the target tape media. The reordered list of User Data Segments is then used to perform seek, reposition and read operations to read User Data Segments from the tape media.
摘要翻译：公开了一种方法，系统和程序，用于重新排序用户数据段（UDS）列表，以减少访问存储在磁带介质上的数据时的查找时间。主机应用程序将UDS列表发送到目标磁带机，并请求磁带机重新排列列表以提高性能。目标用户数据的有序列表接收到从目标磁带介质检索的段。将处理关于目标介质上每个UDS的位置的信息以确定其在磁带介质上的对应物理位置。然后处理所产生的物理位置以产生重新排序的UDS列表，其中用户数据段的顺序根据其在目标磁带介质上的物理位置重新排序。然后，用户数据段的重新排序列表用于执行搜索，重新定位和读取操作，以从磁带介质读取用户数据段。

10. 发明申请

WO2007060103A1 METHOD, SYSTEM, AND APPARATUS FOR DYNAMICALLY VALIDATING A DATA ENCRYTION OPERATION 审中-公开
标题翻译：用于动态地验证数据加密操作的方法，系统和设备
公开(公告)号：WO2007060103A1
公开(公告)日：2007-05-31
申请号：PCT/EP2006/068389
申请日：2006-11-13
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION , IBM UNITED KINGDOM LIMITED , GRECO, Paul, Merrill , SANDBERG, Melanie, Jean , SCHAFFER, Scott, Jeffrey
发明人： GRECO, Paul, Merrill , SANDBERG, Melanie, Jean , SCHAFFER, Scott, Jeffrey
IPC分类号： H04L9/32 , G06F21/00
CPC分类号： H04L9/3236 , H04L2209/30
摘要： A method, system, and apparatus for dynamically validating a data encryption operation are disclosed. In one embodiment, a method is provided which comprises decrypting a first sequential data element of a plurality of data elements substantially in parallel with the encryption of a second sequential data element of the plurality, where the first element comprises first data and first encryption validation metadata. In response to the decryption, second encryption validation metadata is generated utilizing the first data. Thereafter, a determination is made whether the first element has been validly encrypted based upon a comparison of the first and second metadata. In other embodiments, an encryption validation indicator may be generated (e.g., to notify a user of a detected encryption error and/or to mark a portion of data for re-encryption), further encryption operations may be suspended, and/or the storage of the first data element may be controlled following such a determination.
摘要翻译：公开了用于动态地验证数据加密操作的方法，系统和装置。在一个实施例中，提供了一种方法，其包括与多个第二顺序数据元素的加密基本并行地解密多个数据元素的第一顺序数据元素，其中第一元素包括第一数据和第一加密验证元数据。响应于解密，利用第一数据产生第二加密验证元数据。此后，基于第一和第二元数据的比较，确定第一元素是否已被有效地加密。在其他实施例中，可以生成加密验证指示符（例如，向用户通知检测到的加密错误和/或标记用于重新加密的数据的一部分），可以暂停进一步的加密操作，和/或存储可以在这样的确定之后控制第一数据元素。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式