System, Method and Computer Program Product for Tamper Protection in a Data Storage System

摘要

Systems, methods and computer software utilized in the implementation of tamper protection, where unique information associated with data storage tapes and with particular revisions of these tapes is stored on the storage medium itself and on a memory of the tape cartridge, so that the data can be compared to determine whether unauthorized modifications have been made to the tapes. One embodiment is a system which includes an archive node appliance coupled between a set of hosts and a tape media library. The archive node appliance presents files stored on a tape of a media library as a directory. The archive node appliance maintains tamper protection data on the tape and on an auxiliary memory on the cartridge of the tape, and determines from this data whether the tape has been altered by an authorized system.

主权项

1. A system for providing tamper protection, comprising:
an archive node appliance coupled to a media library and a set of hosts, the archive node appliance comprising a processor, a non-transitory computer readable memory, and computer instructions executable by the processor to cause the archive node appliance to:
load a tape cartridge containing a tape in the media library, the tape cartridge having a memory;read a first set of tamper protection data from the tape;read a second set of tamper protection data from the memory of the tape cartridge, each of the first set of tamper protection data from the tape and the second set of tamper protection data from the memory of the tape cartridge comprising:
an index generation value associated with modification of the tape;a universally unique identifier (UUID) associated with the tape;verification data generated using the index generation value, the UUID, or both;a checksum associated with a metadata file on the tape; ora combination thereof; anddetermine whether the tape has been altered by comparing the first set of tamper protection data from the tape and the second set of tamper protection data from the memory of the tape cartridge.