Method of introducing physical device security for digitally encoded data

• US 20060218413A1
• Filed: 03/22/2005
• Published: 09/28/2006
• Est. Priority Date: 03/22/2005
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Williams, Michael Lindsey, Romines, Kameron Bruce, Weisskopf, Michael John
• Application Number:
  US11/086,183
• Publication Number:
  US 20060218413A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 11/1076 Parity data used in redundant arrays of independent storages, e.g. in RAID systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2107 File encryption

Abstract

Securing and accessing digital data by encrypting the digital data with a digital key. The encrypted data is striped across a plurality of physical data storage devices. A key is required to access the digital data. This is done by applying the digital key access the encrypted data across all of the physical data storage devices when all of the physical data storage devices are simultaneously present.

Claims

1. A method of securing and accessing digital data comprising:

a) encrypting the digital data with a digital key;

b) striping said encrypted data across a plurality of physical data storage devices requiring said key for access to the digital data; and

c) applying said digital key to access said encrypted data when all of said physical data storage devices are simultaneously present.

2. The method of claim 1 wherein said plurality of physical data storage devices are removable.

3. The method of claim 1 wherein said digital data is spread across all of the physical data storage devices whereby all of the physical data storage devices are required in order to access the digital data.

4. The method of claim 3 comprising simultaneously applying said digital key to all of said physical data storage devices to access said encrypted data when all of said physical data storage devices are simultaneously present.

5. A data storage system comprising a plurality of separate, individual memory devices for striped storage of encrypted digital data;

a) means for simultaneously applying a digital key to access said encrypted data when all of said physical data storage devices are simultaneously present; and

b) means for simultaneously reading said encrypted data only when all of said physical data storage devices are simultaneously present.

6. The data storage system of claim 5 wherein the physical data storage devices are individually removable.

7. The data storage system of claim 5, said system being adapted for full striping of encrypted data across all of said physical data storage devices.

8. The data storage system of claim 7, said system being adapted for simultaneously applying said digital key to all of said physical data storage devices to access said encrypted data only when all of said physical data storage devices are simultaneously present.

9. A program product comprising computer readable program code for use with a data storage system comprising a plurality of separate, individual memory devices for striped storage of encrypted digital data, and having means for simultaneously applying a digital key to access said encrypted data when all of said physical data storage devices are simultaneously present;

and means for simultaneously reading said encrypted data only when all of said physical data storage devices are simultaneously present, said program code causing said data storage system to secure and access digital data by a method comprising;

a) encrypting the digital data with a digital key;

b) striping said encrypted data across a plurality of physical data storage devices requiring said key for access to the digital data; and

c) applying said digital key to access said encrypted data when all of said physical data storage devices are simultaneously present.

10. The program product of claim 9 wherein said plurality of physical data storage devices are removable.

11. The program product of claim 9 comprising program code for spreading said encrypted data across all of the physical data storage devices whereby all of the physical data storage devices are required in order to access the digital data.

12. The program product of claim 11 comprising program code for simultaneously applying said digital key to all of said physical data storage devices to access said encrypted data when all of said physical data storage devices are simultaneously present.