DETECTING TAMPERING OF DATA DURING MEDIA MIGRATION, AND STORAGE DEVICE

• US 20130159643A1
• Filed: 12/03/2012
• Published: 06/20/2013
• Est. Priority Date: 12/19/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Katagiri, Takashi, Mori, Yuhko, Nakayama, Hirokazu, Oishi, Yutaka
• Granted Patent: US 10,303,593 B2
• Time in Patent Office: Days
• US Class Current: 711/156
• CPC Class Codes: G06F 12/00 Accessing, addressing or allocating within memory systems or architectures digital input from, or digital output to record carriers, e.g. to disk storage units, G06F3/06
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures

Abstract

A method for detecting at a migration destination medium a change in data during media migration between write once read many (WORM) media according to one embodiment includes writing data for WORM from a migration source medium to the migration destination medium; holding an identifier (ID) of the source medium in a non-user storage area in the destination medium; and holding information indicating a feature of the data in the non-user storage area.

Claims

1. A storage device for generating and recording metadata in a migration destination medium, the metadata being for enabling detection of a change in data during media migration between write once read many (WORM) media, the device comprising:

a controller comprising;

logic adapted to write data for WORM from a migration source medium to a migration destination medium;

logic adapted to hold an identifier (ID) of the source medium in a non-user storage area in the destination medium; and

logic adapted to hold feature information in the non-user storage area, wherein the feature information indicates one or more features of the data.

2. The storage device as recited in claim 1, wherein in order to detect a change in data during media migration, the controller further comprises:

logic adapted to check whether a recorded and managed ID of the source medium has been held in the non-user storage area in the destination medium;

logic adapted to check whether the feature information of the data has been held in the non-user storage area;

logic adapted to check whether the feature information of the data and the ID match the information and ID held in the non-user storage area and

logic adapted to determine that tampering has occurred during migration when a negative determination is obtained from any of the logic adapted for checking.

3. The storage device as recited in claim 2, wherein the feature information of the data comprises a total amount of the data and/or a hash value of the data.

4. The storage device as recited in claim 2, wherein the logic adapted to check whether the feature information of the data and the ID match the information and ID held in the non-user storage area comprises logic adapted to compare the feature information of the data held in the non-user storage area with feature information generated from data written to the destination medium.

5. The storage device as recited in claim 4, wherein the feature information is held in a housekeeping data set (HKDS) or a cartridge memory (CM) of a tape cartridge.

6. The storage device as recited in claim 4, wherein the source medium serves as a migration destination medium of a previous-generation medium, and wherein the source medium holds an ID of the previous-generation medium and feature information of data.

7. The storage device as recited in claim 6, wherein the source medium holds, in addition to the data of the previous-generation, data additionally recorded when the source medium is used, wherein an ID of the source medium is assigned to the additionally recorded data and wherein the feature information includes feature information of the additionally recorded data.

8. The storage device as recited in claim 4, wherein the source medium does not hold a media ID or feature information when the source medium is an original medium, and wherein the destination medium assigns feature information to the ID of the source medium and data therein.

9. A method for detecting at a migration destination medium a change in data during media migration between write once read many (WORM) media, the method comprising:

writing data for WORM from a migration source medium to the migration destination medium;

holding an identifier (ID) of the source medium in a non-user storage area in the destination medium; and

holding information indicating a feature of the data in the non-user storage area.

10. The method as recited in claim 9, further comprising:

checking whether a recorded and managed ID of the source medium has been held in the non-user storage area in the destination medium;

checking whether the feature information of the data has been held in the non-user storage area;

checking whether the feature information of the data and the ID match the information and ID held in the non-user storage area; and

determining that tampering has occurred during migration when a negative determination is obtained in at least one of the checking steps.

11. The method as recited in claim 10, wherein the feature information of the data comprises a total amount of the data and/or a hash value of the data.

12. The method as recited in claim 10, wherein the checking whether the feature information of the data and the ID match the information and ID held in the non-user storage area comprises comparing the feature information of the data held in the non-user storage area with feature information generated from data written to the destination medium.

13. The method as recited in claim 12, wherein the feature information is held in a housekeeping data set (HKDS) or a cartridge memory (CM) of a tape cartridge.

14. The method as recited in claim 12, wherein the source medium serves as a migration destination medium of a previous-generation medium, wherein the source medium holds an ID of the previous-generation medium and feature information of data, wherein the source medium holds, in addition to the data of the previous-generation, data additionally recorded when the source medium is used, wherein an ID of the source medium is assigned to the additionally recorded data, and wherein the feature information includes feature information of the additionally recorded data.

15. The method as recited in claim 12, wherein the source medium does not hold a media ID or feature information when the source medium is an original medium, and wherein the destination medium assigns feature information to the ID of the source medium and data therein.

16. A computer program product for detecting at a migration destination medium a change in data during media migration between write once read many (WORM) media, the computer program product comprising to computer readable storage medium having program code embodied therewith, the program code readable/executable by a device to:

write, by the device, data for WORM from a migration source medium to the migration destination medium;

hold, by the device, an identifier (ID) of the source medium in a non-user storage area in the destination medium; and

bold, by the device, feature information in the non-user storage area, wherein the feature information indicates one or more features of the data.

17. The computer program product as recited in claim 16, wherein the program code is further readable/executable by the device to:

check, by the device, whether a recorded and managed ID of the source medium has been held in the non-user storage area in the destination medium;

check, by the device, whether the feature information of the data has been held in the non-user storage area;

check, by the device, whether the feature information of the data and the ID match the information and ID held in the non-user storage area; and

determine, by the device, that tampering has occurred during migration when a negative determination is obtained in any of the computer readable program code configured for checking.

18. The computer program product as recited in claim 17, wherein the feature information of the data comprises a total amount of the data and/or a hash value of the data.

19. The computer program product as recited in claim 17, wherein the program code is further readable/executable by the device to compare, by the device, the feature information of the data held in the non-user storage area with feature information generated from data written to the destination medium.

20. The computer program product as recited in claim 17, wherein the source medium serves as a migration destination medium of as previous-generation medium, wherein the source medium holds an ID of the previous-generation medium and feature information of data,

wherein the source medium holds, in addition to the data of the previous-generation, data additionally recorded when the source medium is used, wherein an ID of the source medium is assigned to the additionally recorded data, wherein the feature information includes feature information of the additionally recorded data,

wherein the source medium does not hold a media ID or feature information when the source medium is an original medium, and wherein the destination medium assigns feature information to the ID of the source medium and data therein.