Detecting tampering of data during media migration, and storage device

• US 10,303,593 B2
• Filed: 12/03/2012
• Issued: 05/28/2019
• Est. Priority Date: 12/19/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Katagiri, Takashi, Mori, Yuhko, Nakayama, Hirokazu, Oishi, Yutaka
• Primary Examiner(s): Thai, Tuan V
• Assistant Examiner(s): Matin, Tasnima
• Application Number:
  US13/692,830
• Publication Number:
  US 20130159643A1
• Time in Patent Office: 2,367 Days
• Field of Search: 711156, 711161-162
• CPC Class Codes: G06F 12/00 Accessing, addressing or allocating within memory systems or architectures digital input from, or digital output to record carriers, e.g. to disk storage units, G06F3/06
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures

Abstract

A method for detecting at a migration destination medium a change in data during media migration between write once read many (WORM) media according to one embodiment includes writing data for WORM from a migration source medium to the migration destination medium; holding an identifier (ID) of the source medium in a non-user storage area in the destination medium; and holding information indicating a feature of the data in the non-user storage area.

Claims

1. A storage device for generating and recording metadata in a migration destination medium, the metadata being for enabling detection of a change in data during media migration between write once read many (WORM) media, the storage device comprising:

a controller comprising;

logic configured to receive an identifier (ID) of a migration source medium, at least one ID of a previous source medium, and feature information indicative of a total amount of data to be migrated from the source medium, the data including data from the previous source medium stored on the source medium;

logic configured to hold the ID of the source medium and the at least one ID of the previous source medium in a non-user storage area in the destination medium, the ID of the previous source medium differentiating the previous source medium from other media including the source medium;

logic configured to hold first feature information of the data as stored on the source medium in the non-user storage area of the destination medium, wherein the first feature information represents one or more features of the data as stored on the source medium, wherein the feature information is added to the non-user storage area using a writing technique which only the controller is allowed to use; and

logic configured to hold migrated data feature information of any previous data as stored on the previous source medium in the non-user storage area.

2. The storage device as recited in claim 1, wherein in order to detect a change in data during media migration, the controller further comprises:

logic configured to check, after the writing, whether the ID of the source medium and the ID of the previous source medium have been held in the non-user storage area in the destination medium;

logic configured to check, after the writing, whether the first feature information of the data as stored on the source medium has been held in the non-user storage area;

logic configured to check, after the writing, whether second feature information of the data as stored on the destination medium, the ID of the source medium, and the ID of the previous source medium match the first feature information, the ID of the source medium, and the ID of the previous source medium held in the non-user storage area; and

logic configured to determine that tampering has occurred during migration in response to a negative determination being obtained from any of the logic configured to check.

3. The storage device as recited in claim 2, wherein the first feature information of the data comprises a hash value of the data stored on the source medium.

4. The storage device as recited in claim 2, wherein the logic configured to check whether the second feature information of the data as stored on the destination medium, the ID of the source medium, and the ID of the previous source medium matches the first feature information, the ID of the source medium, and the ID of the previous source medium held in the non-user storage area comprises:

logic configured to generate the second feature information from the data stored on the destination medium;

logic configured to compare the ID of the source medium with the ID of the source medium held in the non-user storage area;

logic configured to compare the IDs of previous source media with the IDs of previous source media held in the non-user storage area; and

logic configured to compare the first feature information held in the non-user storage area with the second feature information generated from the data written to the destination medium.

5. The storage device as recited in claim 4, wherein the first feature information held in the non-user storage area is stored in a housekeeping data set (HKDS) and/or a cartridge memory (CM) of a tape cartridge, the tape cartridge housing the destination medium.

6. The storage device as recited in claim 4, wherein the source medium serves as a migration destination medium of a previous-generation medium having one of the IDs of previous source media, and wherein the source medium holds the ID of the previous-generation medium and feature information of data from the previous-generation medium in a non-user storage area of the source medium.

7. The storage device as recited in claim 6, wherein the source medium holds, in addition to the data of the previous-generation medium, data additionally recorded when the source medium is used, wherein the ID of the source medium is assigned to the additionally recorded data, and wherein the first feature information of the data on the source medium includes feature information of the additionally recorded data.

8. The storage device as recited in claim 4, wherein the source medium does not hold a media ID and feature information of data from previous source media when the source medium is an original medium, and wherein feature information is assigned to the ID of the source medium and data therein during migration of the data to the destination medium.

9. A method for detecting a change in data during media migration between write once read many (WORM) media, the method comprising:

receiving an identifier (ID) of a migration source medium and feature information indicative of a total amount of data to be migrated from the source medium;

holding the ID of the source medium in a non-user storage area in a destination medium, wherein the ID of the source medium is configured to identify the source medium during data migration from other possible source media;

holding the feature information in the non-user storage area;

after holding the ID and feature information in the non-user storage area of the destination medium, receiving data for WORM from the source medium;

writing the received data to the destination medium;

after the writing, comparing the feature information held in the non-user storage area with a value corresponding to the amount of the data written to the destination medium; and

determining that tampering has occurred during migration in response to determining that the value is different than the feature information held in the non-user storage area.

10. The method as recited in claim 9, further comprising:

after the writing, checking whether a recorded and managed ID of the source medium has been held in the non-user storage area in the destination medium;

after the writing, checking whether the feature information of the data has been held in the non-user storage area;

after the writing, receiving the ID of the source medium again, and checking whether the ID matches the ID held in the non-user storage area; and

determining that tampering has occurred during migration when a negative determination is obtained in at least one of the checking steps.

11. The method as recited in claim 10, wherein the feature information of the data comprises a total amount of the data and/or a hash value of the data wherein the feature information is added to the non-user storage area using a writing technique which only a controller of a device writing the received data to the destination medium is allowed to use.

12. The method as recited in claim 10, wherein the checking whether the feature information of the data and the ID match the information and ID held in the non-user storage area comprises comparing the feature information of the data held in the non-user storage area with feature information generated from data written to the destination medium.

13. The method as recited in claim 12, wherein the feature information is held in a location selected from the group consisting of:

a housekeeping data set (HKDS) and a cartridge memory (CM) of a tape cartridge.

14. The method as recited in claim 12, wherein the source medium serves as a migration destination medium of a previous-generation medium, wherein the source medium holds an ID of the previous-generation medium and feature information of data, wherein the source medium holds, in addition to the data of the previous-generation, data additionally recorded when the source medium is used, wherein an ID of the source medium is assigned to the additionally recorded data, and wherein the feature information includes feature information of the additionally recorded data.

15. The method as recited in claim 12, comprising sending an encryption key from a device writing the data to the destination medium to a device sending the data from the source medium, wherein the data received from the source medium is encrypted using the encryption key, and comprising decrypting the received data and writing the decrypted data to the destination medium.

16. A computer program product for detecting at a migration destination medium a change in data during media migration between write once read many (WORM) media, the computer program product comprising a non-transitory computer readable storage medium having program code embodied therewith, the program code readable/executable by a device to:

write, by the device, data for WORM from a migration source medium to the migration destination medium;

hold, by the device, an identifier (ID) of the source medium in a non-user storage area in the destination medium, wherein the ID of the source medium is configured to identify the source medium during data migration from other possible source media; and

hold, by the device, feature information in the non-user storage area, wherein the feature information indicates one or more features of the data selected from a group consisting of;

a total amount of the data stored on the source medium or a hash value of the data stored on the source medium,

wherein the feature information is added to the non-user storage area using a writing technique which only the device is allowed to use.

17. The computer program product as recited in claim 16, wherein the program code is further readable/executable by the device to:

check, by the device, whether a recorded and managed ID of the source medium has been held in the non-user storage area in the destination medium;

check, by the device, whether the feature information of the data has been held in the non-user storage area;

check, by the device, whether the feature information of the data and the ID match the information and ID held in the non-user storage area; and

determine, by the device, that tampering has occurred during migration when a negative determination is obtained in any of the computer readable program code configured for checking.

18. The computer program product as recited in claim 17, wherein the program code is further readable/executable by the device to write a migration completion flag to the destination medium in response to positive determinations being obtained in all of the computer readable program code configured for checking.

19. The computer program product as recited in claim 17, comprising program code executable by the device to receive at least one ID of a previous source medium, and feature information indicative of a total amount of data to be migrated from the source medium, the data including data from the previous source medium stored on the migration source medium.

20. The computer program product as recited in claim 17, wherein the source medium serves as a migration destination medium of a previous-generation medium, wherein the source medium holds an ID of the previous-generation medium and feature information of data,

wherein the source medium holds, in addition to the data of the previous-generation, data additionally recorded when the source medium is used, wherein an ID of the source medium is assigned to the additionally recorded data, wherein the feature information includes feature information of the additionally recorded data,

wherein the source medium does not hold a media ID or feature information when the source medium is an original medium, and wherein the destination medium assigns feature information to the ID of the source medium and data therein.