Tape backup method

• US 9,195,839 B2
• Filed: 02/10/2011
• Issued: 11/24/2015
• Est. Priority Date: 12/05/2006
• Status: Expired due to Fees

• Current Assignee: Security First Innovations, LLC
• Original Assignee: Security First Corp
• Inventors: O'Hare, Mark S., Orsini, Rick L., Martin, Don
• Primary Examiner(s): Chery, Mardochee
• Application Number:
  US13/024,783
• Publication Number:
  US 20110202763A1
• Time in Patent Office: 1,748 Days
• Field of Search: 711/162
• US Class Current: 1/1
• CPC Class Codes: G06F 11/1402 Saving, restoring, recovering or retrying
• CPC Class Codes: G06F 11/1456 Hardware arrangements for backup
• CPC Class Codes: G06F 11/1464 for networked environments
• CPC Class Codes: G06F 11/1469 Backup restoration techniques
• CPC Class Codes: G06F 11/1474 in transactions G06F16/20 takes precedence
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2201/84 Using snapshots, i.e. a logical point-in-time copy of the data
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: G06F 3/0619 in relation to data integrity, e.g. data losses, bit errors
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/064 Management of blocks
• CPC Class Codes: G06F 3/0664 at device level, e.g. emulation of a storage device or system
• CPC Class Codes: G06F 3/0686 Libraries, e.g. tape libraries, jukebox
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00

Abstract

A secure data parser is provided that may be integrated into any suitable system for securely storing and communicating data. The secure data parser parses data and then splits the data into multiple portions that are stored or communicated distinctly. Encryption of the original data, the portions of data, or both may be employed for additional security. The secure data parser may be used to protect data in motion by splitting original data into portions of data, that may be communicated using multiple communications paths.

Claims

1. A method of providing data backup, the method comprising:

receiving at a virtual tape backup system a tape image to be maintained;

performing a cryptographic operation on the contents of the tape image and distributing the contents of the tape image in a plurality of secondary data blocks based on a key, wherein each of the plurality of secondary data blocks contains a random or pseudo-random distribution of a respective subset of the tape image, and wherein the key is usable to determine into which of the plurality of secondary data blocks each unit of the tape image is placed; and

storing the plurality of secondary data blocks in a plurality of shares located on a plurality of physical storage devices of the virtual tape backup system by accessing one or more logical mount points that point to the plurality of physical storage devices,

whereby the tape image is restorable from a threshold number less than all of the plurality of shares.

2. The method of claim 1, further comprising cataloging the contents of the tape image at the virtual tape backup system.

3. The method of claim 1, further comprising transmitting the plurality of secondary data blocks to a secure storage system.

4. The method of claim 1, wherein the physical storage devices include magnetic tape recording devices.

5. The method of claim 1, wherein the physical storage devices include hard disk drives.

6. The method of claim 1, wherein the virtual tape backup system comprises software executing on the secure storage system.

7. The method of claim 1, further comprising the virtual tape backup system transmitting the contents of the tape image to a secure storage system by addressing a virtual disk presented to a virtual tape server by the secure storage system.

8. The method of claim 7, further comprising transmitting the contents of the tape image from the virtual tape backup system to a client system.

9. The method of claim 1, further comprising reconstituting the contents of the tape image from at least the threshold number of secondary data blocks from among the plurality of secondary data blocks.

10. The method of claim 1, wherein the plurality of secondary data blocks corresponds to a portion of the contents of the tape image.

11. A data backup arrangement comprising:

a virtual tape backup system configured to

receive contents of a tape image to be maintained;

perform a cryptographic operation on the contents of the tape image and distribute the contents of the tape image in a plurality of secondary data blocks based on a key, wherein each of the plurality of secondary data blocks contains a random or pseudo-random distribution of a respective subset of the tape image, and wherein the key is usable to determine into which of the plurality of secondary data blocks each unit of the tape image is placed; and

store the plurality of secondary data blocks in a plurality of shares located on a plurality of physical storage devices by accessing one or more logical mount points that point to the plurality of physical storage devices,

whereby the tape image is restorable from a threshold number less than all of the plurality of shares.

12. The data backup arrangement of claim 11, wherein the virtual tape backup system is configured to receive the tape image from an application server.

13. The data backup arrangement of claim 11, wherein the physical storage devices include magnetic tape recording devices.

14. The data backup arrangement of claim 11, wherein the physical storage devices include hard disk drives.

15. The data backup arrangement of claim 11, wherein one or more of the physical storage devices is at a location remote from the virtual tape backup system.

16. The data backup arrangement of claim 11, wherein the virtual tape backup system is further configured to reconstitute the contents of the tape image from at least the threshold number of secondary data blocks from among the plurality of secondary data blocks.

17. The data backup arrangement of claim 16, wherein the virtual tape backup system is further configured to transmit the contents of the tape image from the virtual tape backup system to a client system.

18. The data backup arrangement of claim 11, wherein the plurality of secondary data blocks corresponds to a portion of the contents of the tape image.

19. A secure storage system configured to operate within a data backup arrangement, the secure storage system including a programmable circuit configured to execute program instructions which, when executed, configure the secure storage system to:

receive contents of a tape image from a virtual tape backup system;

perform a cryptographic operation on the contents of the tape image and distribute the contents of the tape image in a plurality of secondary data blocks based on the key, wherein each of the plurality of secondary data blocks contains a random or pseudo-random distribution of a respective subset of the tape image, and wherein the key is usable to determine into which of the plurality of secondary data blocks each unit of the tape image is placed; and

store the plurality of secondary data blocks in a plurality of shares located on a plurality of physical storage devices of the virtual tape backup system by accessing one or more logical mount points that point to the plurality of physical storage devices,

whereby the tape image is restorable from a threshold number less than all of the plurality of shares.

20. The secure storage system of claim 19, wherein the physical storage devices include magnetic tape recording devices.

21. The secure storage system of claim 19, wherein the physical storage devices include hard disk drives.