Secure data scrubbing

• US 20070083626A1
• Filed: 10/06/2005
• Published: 04/12/2007
• Est. Priority Date: 10/06/2005
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Walker, Philip, O Keefe, Brian
• Granted Patent: US 7,325,078 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 21/805 using a security table for the storage sub-system
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 3/0604 Improving or facilitating administration, e.g. storage management
• CPC Class Codes: G06F 3/062 Securing storage systems
• CPC Class Codes: G06F 3/0652 Erasing, e.g. deleting, data cleaning, moving of data to a wastebasket
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]

Abstract

In one embodiment, a method comprises receiving, at a processor, an input/output request that designates at least one data block on a storage medium against which the input/output operation is to be executed; and altering a response to the input/output request when a scrub state data table indicates that the at least one data block designated in the input/output request is subject to an open scrub command.

Claims

1. A method, comprising:

receiving, at a processor, an input/output request that designates at least one data block on a storage medium against which the input/output operation is to be executed; and

altering a response to the input/output request when a scrub state data table indicates that the at least one data block designated in the input/output request is subject to an open scrub command.

2. The method of claim 1, wherein altering the response to the input/output request when a scrub state data table indicates that the at least one data block designated in the input/output request is subject to an open scrub command comprises:

accessing a scrub state data table to determine the data scrub state of the at least one data bock designated in the input/output request.

3. The method of claim 1, wherein altering the response to the input/output request when a scrub state data table indicates that the at least one data block designated in the input/output request is subject to an open scrub command comprises:

generating an error message that indicates that the I/O request cannot be executed against the at least one data block.

4. The method of claim 1, wherein altering the response to the input/output request when a scrub state data table indicates that the at least one data block designated in the input/output request is subject to an open scrub command comprises:

returning a meaningless sequence of values in response to the input/output request.

5. The method of claim 1, wherein altering the response to the input/output request when a scrub state data table indicates that the at least one data block designated in the input/output request is subject to an open scrub command comprises:

returning a pre-existing cached sequence of values in response to the input/output request, wherein the pre-existing cached sequence may be fixed, or may be specified by an entry in the scrub state data table associated with the at least one data block.

6. The method of claim 1, wherein altering the response to the input/output request when a scrub state data table indicates that the at least one data block designated in the input/output request is subject to an open scrub command comprises:

placing the input/output request in a queue for processing at a later time.

7. The method of claim 1, further comprising executing the input/output request when a scrub state data table indicates that the at least one data block designated in the input/output request is not subject to an open scrub command.

8. The method of claim 1, further comprising:

executing a write operation to the at least one block on the storage medium; and

updating the scrub state data table to reflect a successful execution of the scrubbing operation by setting the scrub state to NORMAL

9. A storage medium controller, comprising:

an input/output module;

a processor module; and

a memory module communicatively connected to the processor and comprising logic instructions which, when executed by the processor, configure the processor to;

receive, at a processor, an input/output request that designates at least one data block on a storage medium against which the input/output operation is to be executed;

alter a response to the input/output request when a scrub state data table indicates that the at least one data block designated in the input/output request is subject to an open scrub command.

10. The storage medium controller of claim 9, further comprising logic instructions which, when executed by the processor, configure the processor to:

access a scrub state data table to determine the data scrub state of the at least one data bock designated in the input/output request.

11. The storage medium controller of claim 9, further comprising logic instructions which, when executed by the processor, configure the processor to:

generate an error message that indicates that the I/O request cannot be executed against the at least one data block.

12. The storage medium controller of claim 9, further comprising logic instructions which, when executed by the processor, configure the processor to further comprising logic instructions which, when executed by the processor, configure the processor to:

return a random or meaningless sequence of values in response to the input/output request.

13. The storage medium controller of claim 9, wherein altering the response to the input/output request when a scrub state data table indicates that the at least one data block designated in the input/output request is subject to an open scrub command comprises:

returning a pre-existing cached sequence of values in response to the input/output request, the pre-existing cached sequence may be fixed, or may be specified by the entry in the scrub state data table associated with the at least one data block.

14. The storage medium controller of claim 9, further comprising logic instructions which, when executed by the processor, configure the processor to:

place the input/output request in a queue for processing at a later time.

15. The storage medium controller of claim 9, further comprising logic instructions which, when executed by the processor, configure the processor to:

execute the input/output request when a scrub state data table indicates that the at least one data block designated in the input/output request is not subject to an open scrub command.

16. The storage medium controller of claim 9, further comprising logic instructions which, when executed by the processor, configure the processor to:

execute a scrubbing operation on the storage medium; and

update the scrub state data table to reflect a successful execution of the scrubbing operation.

17. The storage medium controller of claim 9, wherein the storage medium controller is a disk controller.

18. The storage medium controller of claim 9, wherein the storage medium controller is a storage controller.

19. A storage device, comprising:

a persistent storage medium comprising a plurality of addressable memory locations and a scrub state data table;

a storage controller including a memory module communicatively connected to a processor and comprising logic instructions which, when executed by the processor, configure the processor to refuse input/output requests directed to one or more addressable memory locations indicated in the scrub state data table as subject to an outstanding scrub operation.

20. The storage device of claim 19, wherein the persistent storage medium comprises a hard disk, a floppy disk, an optical disk, or a magnetic tape.

21. The storage device of claim 19, wherein the scrub state data table comprises an entry for each addressable memory location on the persistent storage medium.

22. The storage device of claim 19, wherein the memory module further comprises logic instructions which, when executed by the processor, configure the processor to generate an error message that indicates that the I/O request cannot be executed against the at least one data block.