Hewlett Packard Enterprise Development LP

Christopher Anthony Grant Hillier

Curtis C Ballard

Ludovic Emmanuel Paul Noel Jacquin

Thomas M Laffey

Gareth Richards

In some examples, a storage system includes a controller to receive a request for a data encryption key from the host system, in response to the request, retrieve, from a key manager system, the data encryption key for the host system, and encrypt the data encryption key retrieved from the key manager system using a first key, to produce an encrypted data encryption key. The controller sends the encrypted data encryption key to the host system, and receives, from the host system, encrypted data encrypted using the data encryption key.

Encryption keys from storage systems

In some examples, a computer receives a command to transport a storage cartridge in a storage system from a physical storage slot to a storage drive, and determines whether the storage cartridge is associated with a restricted transport indication set by a configuration operation in the storage system. In response to determining that the storage cartridge is associated with the restricted transport indication, the computer checks for an indication of receipt of an access secret information, and denies processing of the command to transport the storage cartridge if the indication of receipt of the access secret information is not present.

Restricted transport storage cartridges

A process includes communicating by a first device, with a second device. The communicating includes the first device receiving data from the second device that represents a certificate. The certificate binds a hierarchy of logical identifiers to a cryptographic key. The hierarchy of identifiers includes a first logical identifier that corresponds to a group membership. The process includes authenticating, by the first device, the second device based on the certificate. The process includes allowing, by the first device, a secure connection to be set up between the first device and the second device based on whether the first logical identifier represents that the second device is a member of a first group of devices of which the first device is a member.

Authorizing secure connections responsive to certificates bound to logical identifiers

A method for anonymizing documents before publication is provided. The method includes identifying regular expressions configured to match strings to be anonymized in a document, selecting a readable identifier as an anonymized reference for a string replacement, searching the document for a match string that fits the regular expression, hashing the match string using a collision resistant, deterministic, non-inverting cryptographic hashing function, and comparing a cryptographic hash of the match string with a database including multiple previous hashes and multiple corresponding readable identifiers. When none of the previous hashes matching the cryptographic hash, the method includes creating a new database record including the cryptographic hash, incrementing a counter in the readable identifier and associating the readable identifier with the new database record, and replacing the match string with the readable identifier, throughout the document. A system and a medium storing instructions to perform the above method are also provided.

Data anonymization for a document editor

Storage management is performed by detecting installation of at least one new physical tape drive in a storage system. The storage system may include a plurality of tape drives. The plurality of tape drives include physical tape drives and virtual tape drives. Based on the detection, a unique name of at least one virtual tape drive is transferred to the at least one new physical tape drive.

Growing community of inventors

Fort Collins, CO, United States of America

Christopher Anthony Grant Hillier