International Business Machines Corporation

Brian Gerard Goodman

Leonard George Jesionowski

Glen Alan Jaquette

Michael Philip McIntosh

Ronald Faye Hill, Jr

Raymond Yardy

Frank David Gallo

Robin Daniel Roberts

James Arthur Fisher

Arthur John Colvig

Paul Merrill Greco

Diana Joyce Hellman

Timothy Keith Pierce

Mark Delorman Schultz

Paul Merril Greco

Jonathan Edward Bosley

Aaron Lyle Herring

David John Butka

Daniel Charles Estelle

Dietrich Etzel

Roberta Lee Winston

Jason Lee Peipelman

Robert Beverley Basham

James Mitchell Karp

Kenny Nian Gan Qiu

Jose G Miranda Gavillan

Toshiyuki Shiratori

Gary Anna

Judson A McDowell

Michael L Taylor

Fernando Quintana

Aaron S Palazzolo

Jeffrey Lawrence Thorn

Mark Edward Hill

Lee Jesionowski

Daniel Scott Moore

Steven Ned Pierce

Thomas Holderness Daily

Charles Anthony Thompson, Jr

Robert A Klem

Dennis Paul Martinez

Staley Bert Slawson

Ahmed M Almoustafa

An Thien Tran

Glen Alan Jacquette

Justin James Hom

Brian Dean Rasmussen

A computer program product for acclimating at least one electronic data storage library component for insertion or removal from an electronic data storage library, the computer program product comprising: one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media. The program instructions include program instructions to insert at least one data storage library component into an acclimation device; to monitor at least one environmental condition within the acclimation device; to determine if the at least one environmental condition within the acclimation device meets a predetermined threshold; to adjust the at least one environmental condition within the acclimation device; and to remove the at least one electronic data storage library component from the acclimation device in response to determining that the at least one environmental condition within the acclimation device meets the predetermined threshold.

Acclimating data storage media and components in a data storage library

A computer-implemented method includes initiating a copy request for a data storage cartridge. The data storage cartridge includes data storage media having host data thereon. The method also includes transparently loading the data storage cartridge into a first data storage drive of a data storage library and establishing drive-to-drive communication for copying data from the data storage media in the first data storage drive to data storage media in a second data storage drive. The method includes copying data from the data storage media in the first data storage drive to the data storage media in the second data storage drive. A system includes a processor and logic integrated with the processor, executable by the processor, or integrated with and executable by the processor. The logic is configured to perform the foregoing method.

Transparent drive-to-drive copying

In an automated data storage library, selective encryption for data stored or to be stored on removable media is provided. One or more encryption policies are established, each policy including a level of encryption, one or more encryption keys and the identity of one or more data cartridges. The encryption policies are stored in a policy table and the encryption keys are stored in a secure key server. A host requests access to a specified data cartridge and the cartridge is transported from a storage shelf in the library to a storage drive. Based on the identity of the specified cartridge, the corresponding encryption policy is selected from the table and the appropriate encryption key is obtained from the key server. The storage drive encrypts data in accordance with the key and stores the data on the media within the specified data cartridge.

Selective encryption of data stored on removable media in an automated data storage library

Disclosed is a method for eliminating access to data on removable storage media of a removable storage media cartridge. A key is stored on the removable storage media cartridge, such that data on the removable storage media is accessible with the key. Upon receiving a command to eliminate access to data on the removable storage media the key is shredded such that access to data on the removable storage media is eliminated.

Bulk data erase utilizing an encryption technique

Disclosed are a system, a method, and an article of manufacture to provide for the use of a global positioning system (GPS) to provide location information for an automated data storage library. One or more GPS antennas and receivers are coupled to an automated data storage library to enable quick and accurate location information for the automated data storage library. The location information may be used to determine the physical location of the automated data storage library. The GPS antennas may also be attached to one or more library frames in the automated data storage library to enable accurate location information for each frame. The GPS antennas are attached to one or more accessors or one or more drive canisters to provide accurate location information for each component.

Global positioning system location information for an automated data storage library

Provided are a method, system, and article of manufacture for rekeying encryption keys for removable storage media. A rekey request is received for a coupled removable storage media, wherein encryption on the coupled removable storage media uses a first key and wherein the rekey request indicates a second key. The first key and the second key are accessed in response to the rekey request. The first key is used to perform decryption for the coupled removable storage media and the second key is used to perform encryption for the coupled removable storage media.

Rekeying encryption keys for removable storage media

A method, system and a computer program product to increase the availability of an automated data storage library for accessing and storing data storage media are provided. Work requests received by an accessor controller of the library from a host computer are also received and stored by a work request tracking controller. The accessor controller converts the work request into commands necessary to direct an accessor to fulfill the work request, and then sends such commands to an accessor. Upon detection by the work request tracking controller that the so-directed accessor failed to conduct the command issued by the accessor controller, the work request tracking controller reconstructs the work request and sends it to an accessor controller. The provision of a work request tracking controller is a failover mechanism in the event an accessor controller fails to successfully direct an accessor to conduct commands in furtherance of a work request and/or has, for whatever reason, lost the work requests in its queue.

Accessor control failover in an automated data storage library

An apparatus, system, and method are disclosed for performing data library background operations. The present invention teaches one or more data storage drives capable of entering a phantom load mode and a library controller capable of initiating the phantom load mode for the data storage drives. The phantom load mode operates to hide the media status of the data storage drives from host computers during background operations involving the data storage drives. In certain embodiments, the data storage drives exit the phantom load mode as a result of a media unload request. In some embodiments, the library controller receives a media load request from a host computer during the background operation and completes the media load request upon completion of the background operation.

Data library background operations system apparatus and method

A label corresponding to a cryptographic key is stored at a first computational device. A user provided label is received at a second computational device. The user provided label is sent from the second computational device to the first computational device. The user provided label is compared to the label stored at the first computational device. The cryptographic key is used to perform cryptographic operations on data, in response to determining that the user provided label matches the label stored at the first computational device.

Validation of encryption key

In an automated data storage library, selective encryption for data stored or to be stored on removable media is provided. One or more encryption policies are established, each policy including a level of encryption one or more encryption keys and the identity of one or more data cartridges. The encryption policies are stored in a policy table and the encryption keys are stored in a secure key server. A host requests access to a specified data cartridge and the cartridge is transported from a storage shelf in the library to a storage drive. Based on the identity of the specified cartridge the corresponding encryption policy is selected from the table and the appropriate encryption key is obtained from the key server. The storage drive encrypts data in accordance with the key and stores the data on the media within the specified data cartridge.

Rekeying encryption for removable storage media

A computer program product for operating an automated data storage library with storage shelves, data storage drive(s), a bus bar; and a robot accessor with a drive system for moving the robot accessor, an accessor communication interface, a bus bar relay configured to engage and disengage the bus bar; and a robot control configured to operate the drive system to move the robot accessor, to operate a picker, and to operate the bus bar relay to engage the bus bar when the robot accessor is stationary, to provide communication capability with a library communication interface via the bus bar relay and the bus bar when the bus bar relay engages the bus bar. Additionally, a second communication system may be provided between the robot accessor and the automated data storage library, which is operable at least when the robot accessor is moving.

Computer program product to provide bus bar burst communications for an automated data storage library

Provided are a method, system, and article of manufacture for configuring a storage drive to communicate with encryption and key managers. A storage drive receives a request to access a coupled removable storage media for drive operations. The storage drive obtains encryption status for the coupled removable storage media from an encryption manager. The storage drive determines from the obtained encryption status whether to encrypt the coupled removable storage media to access. The storage drive obtains at least one key from a key manager in response to determining to encrypt with respect to the coupled removable storage media. The storage drive performs data operations using the at least one key to encrypt data.

Configuring a storage drive to communicate with encryption and key managers

A method and a computer program product are provided to perform a key path diagnostic that aids in isolating an error within the encryption storage system. A first communication test is performed on a path between the key proxy and the drive. The first communication test verifies that the path between the drive and the key proxy is operational. A second communication test is performed on a path between the key proxy and the key server. The second communication test verifies that the path between the key proxy and the key server is operational. In addition, the drive or the key proxy sends a command to the key manager to attempt communication with the key manager. The communication attempt verifies the installation and configuration parameters related to the key manager.

Encryption key path diagnostic

A system is provided to perform a key path diagnostic that aids in isolating an error within the encryption storage system. The system includes at least one drive, a key proxy, a key server, a key manager, and a processor. The processor performs a first communication test on a path between the key proxy and the drive. The first communication test verifies that the path between the drive and the key proxy is operational. The processor performs a second communication test on a path between the key proxy and the key server. The second communication test verifies that the path between the key proxy and the key server is operational. In addition, processor sends a command to the key manager to attempt communication with the key manager. The communication attempt verifies the installation and configuration parameters related to the key manager.

System for an encryption key path diagnostic

Growing community of inventors

Tuscon, AZ, United States of America

Brian Gerard Goodman