Oracle America, Inc.

Quantum Corporation

Dwayne A Edling

James Prescott Hughes

Alexander S Stewart

Bradley Edwin Whitney

Howard H Rather

Gregory S Toles

Michael E Foy

Benjamin J Baron

Theron White

Mark A Payne

Douglas F Barbian

Daniel Dauer

Charles Klomp

A method of protecting a media key including obtaining the media key, obtaining an auxiliary key, calculating a split key using the media key and the auxiliary key, encrypting the split key using a wrap key to generate an encrypted split key, assembling the encrypted split key and a communication key to obtain a data bundle, and sending the data bundle to a token, where the media key is extracted from the data bundle on the token to protect data on a storage device.

Method and system for protecting keys

A hand-held token for secure conveyance of encryption keys includes memory for holding a media key and at least one device key. Control logic reads the media key from memory, encrypts the media key based on the device key, and transmits the encrypted media key to a data storage device. The data storage device decrypts the encrypted media key using its own device key, which may have previously been downloaded from a token.

Token-based encryption key secure conveyance

A data encryption system with encryption integrity verification includes an encryption engine configured to receive an unencrypted data packet and generate an encrypted data packet based at least in part on the unencrypted data packet. The system also includes a decryption engine in electronic communication with the encryption engine, the decryption engine configured to receive the encrypted data packet and generate a decrypted data packet based at least in part on the encrypted data packet. The system further includes a comparator in electronic communication with the encryption engine and the decryption engine, the comparator configured to receive the unencrypted and decrypted data packets, determine whether the unencrypted and decrypted data packets are identical, and present the encrypted data packet as an output when the unencrypted and decrypted data packets are identical.

System, method and data storage device for encrypting data

A multiple field nonce particularly suited for use in encryption algorithms associated with data storage has at least one field unique to each data storage device to avoid the possibility of the same nonce value being used to store more than one data string. Additional fields may be based on the number of times at least one encryption key is associated with the storage device and on a number assigned to the particular string of data.

Nonce structure for storage devices

A system, method and data storage device for encrypting data to provide at-rest data encryption of data in the data storage device. The system includes a compression engine for receiving a host data stream packet and selectively generating a compressed data packet, and an encryption engine in electronic communication with the compression engine for receiving an unencrypted data packet from the compression engine. The unencrypted data packet comprises the compressed data packet when the compression engine generates the compressed data packet. The unencrypted data packet comprises the host data packet when the compression engine does not generate the compressed data packet. The encryption engine generates an encrypted data packet having an encrypted component corresponding to the unencrypted data packet and a set of meta data indicative of one or more characteristic of the encrypted data packet.

Systems and methods for storing data on a tape medium and coping with defective regions on the tape medium are provided. The method includes: writing a plurality of envelopes of data onto the tape medium, each envelope of data comprising a plurality of blocks of data; detecting a defective region of the tape medium; writing a boundary start field after the defective region, the boundary start field indicating that the defective region has been passed; and writing a boundary end field before the defective region of the tape medium, the boundary end field indicating that the defective region follows the boundary end field.

Bounding defective regions of a tape storage medium

A system and method of operating a storage system is provided. The storage system includes a tape drive for reading and writing data to a magnetic tape medium of a tape storage media device, and an auxiliary memory emulator for receiving I/O commands to perform I/O operations on an auxiliary memory and for rerouting the commands to perform the I/O operations on the magnetic tape medium of the tape storage media device. The method includes receiving I/O commands to perform I/O operations on an auxiliary memory on a tape storage media device, wherein the tape storage media device includes a magnetic tape medium and does not include the auxiliary memory, and routing the I/O commands to the magnetic tape medium provided in the tape storage media device.

Growing community of inventors

Longmont, CO, United States of America

Dwayne A Edling