JPS60125963A - Data cartridge protection system - Google Patents

Abstract

PURPOSE:To protect a data cartridge by devising that a cartridge existing in a cartridge library cannot be extracted from a cell not limited at on-line/off-line so long as a prescribed secret code is not given. CONSTITUTION:When the data cartridge 8 is used at on-line, the loading is requested by designating a secret code given thereto. This secret code is converted into a cartridge protection identifier by means of the same converting rule as that at secret code registration. The result is compared and collated with the cartridge protection identifier stored in the entry corresponding to the protection information table 25, and when they are not coincident, the request is rejected. When the locked data cartridge 8 is ejected at off-line, the identification information and the secret data of the cartridge are given from an operating panel 27. Then an ejection processing section 28 is started and the secret code is checked similarly at a secret confirming section 22. When the secret code is not correct, the lock is not released.

Description

DETAILED DESCRIPTION OF THE INVENTION (5) Technical Field of the Invention The present invention relates to a data cartridge protection system, particularly a so-called Cartridge Library System (CLS). This invention relates to a data cartridge protection system that makes it possible to prevent data cartridge handling errors and theft by providing a coded information checking means and a data cartridge locking mechanism.

(c) Technical background and problems FIG. 1 is an explanatory diagram of a data cartridge, and FIG. 2 shows an example of the configuration of a cartridge library system.

A cartridge library system (CL8) is known as a relatively new external storage device that is lower in price than magnetic disk devices, has a larger capacity, and can reduce the handling load of magnetic tapes and the like. A data cartridge, which is a storage medium, has a wide magnetic tape 1 wound around a spool 2 and housed in a transparent sealed case 3, for example, as shown in FIG.

The cartridge library system 9 is configured as shown in FIG. 2, for example, and includes a cartridge library device 4.
and a cartridge library control device 5. The data cartridges 8 are stored one by one in self storage. The accessor (ARC) 6 carries the data cartridge. A data recording mechanism (DRD) 9 loads/unloads a data cartridge and records/reproduces data. The data recording controller 1 (DRC) 10 is.

It is located between DIRll and DRC9, and performs data formatting control and the like. Di L'lli (
DIR) 11 is DRCI O/DRD9! :ARC6
and realizes a host interface.

Conventionally, in a storage system that records/reproduces data on a cartridge type storage medium, such as the cartridge library system described above.

The protection of the data in the data cartridge is performed by, for example, host software.

Because there is no protection for the data cartridge itself.

The data cartridge could be manually removed from the device when online or offline, and the data cartridge could be removed at will.

Therefore, operation errors may occur when replacing data cartridges, or data cartridges may be stolen or stolen.
There was a risk that it would be misused.

0 Object and Structure of the Invention The present invention aims to solve the above problems and provides a cartridge existing in a cartridge library device.

To provide a method for protecting a data cartridge by making it impossible to take it out from a cell, regardless of whether it is online or offline, unless a predetermined code is given when taking it out from the cell.

Therefore, the data cartridge protection method of the present invention provides cartridge protection in a cartridge-type storage system that includes a plurality of cells, automatically loads the data cartridge stored in the cells into a data recording mechanism, and records and reproduces data. and a cryptographic recording unit that writes a cartridge protection identifier based on input cryptographic information into the data cartridge.

a cartridge protection information storage unit that stores a cartridge protection identifier of the data cartridge in each cell in correspondence with each cell; and cryptographic information specified when using the data cartridge and the cartridge protection identifier in the cartridge protection information storage unit. a locking mechanism that makes it impossible to remove the data cartridge from the cell that houses the data cartridge; and a lock mechanism that prevents the data cartridge from being removed from the cell that stores the data cartridge; The present invention is characterized by comprising a lock release means for releasing the lock by the locking mechanism when the input data matches the cartridge protection identifier in the cartridge protection information storage section. Embodiments will be described below with reference to the drawings.

(g) Embodiment of the Invention Figure 3 shows the configuration of an embodiment of the present invention, Figure 4 is an explanatory diagram of the process at the time of cryptographic registration, Figure 5 is an explanatory diagram of the process when using a cartridge online, and Figure 6 is an offline diagram. An explanatory diagram of an eject request in is shown.

In the figure, numerals 4.7 to 9 correspond to those in FIG.

15A and 15B are locking mechanisms, and 20 is a code recording section.

21 is a mount processing section, 22 is a code confirmation section, 23 is a cartridge protection unit, and 24 is a protection control section.

25 is a protection information table, 26 is a floppy disk device, 27 is an operation panel, and 28 is an eject processing section.

In the case of the present invention, data cartridges 8A, 8B.

Each self A, 7B, . . . that stores . . . is provided with a locking mechanism 15A, 15B, .

The locking mechanism 15A locks the data cartridge 8A stored in the self-service person using a shutter mechanism installed at the entrance of self-service A or a hook-based exposure mechanism, etc., so that the data cartridge 8A stored in the self-service person cannot be accessed by nine people unless the device releases the lock internally. This makes it impossible to physically remove it.

If power is not applied to the cartridge library device 4, the lock will not be released, and therefore, removal of the eight data cartridges from the user is prohibited.

The cartridge protection unit 23 is a data cartridge protection mechanism provided within the cartridge library system, and includes a protection control section 24 that operates with a micro processor.

The protection control unit 24 performs a cryptographic check on the lock/unlock control by the lock mechanisms 15A and 15B, the control of the operation panel 27 for offline data cartridge operation, and the offline ejection of the data cartridges 8A and 8B. management of the protection information table 25 in which protection information such as encryption for each data cartridge is stored;
It also controls writing/reading of the protection information table 25 to the floppy disk device 26.

For example, at the time of volume initialization of a data cartridge, the encryption recording unit 20 generates a cartridge protection identifier from the encryption data instructed by the system administrator, and transfers the information of the cartridge protection identifier to the designated data cartridge installed in the cartridge library device 4. A data cartridge in which a cartridge protection identifier has been assigned to the 0 self A that executes the process of recording on the data cartridge
When the IJ cartridge 8A is stored, its cartridge protection identifier is set in the protection information table 25.

The mount processing unit 21 executes a process of mounting eight data cartridges on the data recording mechanism 9 in response to an online request to use the data cartridge 8A. To use the data cartridge, it is necessary to specify the code recorded by the code recording section 20. The code confirmation unit 22 checks whether the code specified for use of the data cartridge corresponds to the card protection identifier stored in the protection information table 25, and determines whether or not the data cartridge can be used. It is something to do.

Next, the processing operation of the embodiment illustrated in FIG. 3 will be described with reference to FIGS. 4 to 6.

FIG. 4 shows the processing performed by the cipher recording unit 20 at the time of cipher registration. For example, when the code [KOUMURAJ] is specified and the code recording unit 20 is activated for cryptographic registration of the data cartridge 8, the code recording unit 20 generates a cartridge protection identifier according to a predetermined conversion rule. do. In this example, the cartridge protection identifier is
[It is now PJFNFIZJ. This cartridge protection identifier is set as the volume management area in the data cartridge B. The cartridge protection identifier is also written into the protection information table 25 together with the cartridge identifier C-ID and the self cell address. The cartridge identifier C-ID is an identifier consisting of a cartridge serial number assigned in advance and a volume serial number assigned by the user for volume management, and is used to uniquely identify, for example, a data cartridge 8. This is to distinguish the protection information table 25 from other data cartridges.When the contents of the protection information table 25 are updated, the protection information table 25 is saved to a floppy disk device 26 or the like shown in FIG. 3 to save the information. .

Furthermore, the data cartridge 8 that has been assigned a code and is associated with a specific user is locked and is prohibited from being taken out by one person.

FIG. 5 shows an example of processing when using an online data cartridge. When using the data cartridge 8, a resource management unit (not shown) makes a mount request in advance by specifying the allocated cipher. This code is converted into a cartridge protection identifier using the same conversion rule as the conversion rule used at the time of code registration, and compared with the cartridge protection identifier stored in the corresponding entry in the protection information table 25.

If the IJ Tsuji protection identifiers match, use is permitted and mounting processing is performed.

If they do not match, it is considered an ineligible use request.
0 The above code check will result in the request being rejected.

The cryptographic verification unit 22 shown in FIG.
2 may be configured to be provided in the cartridge protection unit 23 on the cartridge life library system side, or the cartridge life library system side may provide a function to refer to the protection information table 25 and the host side It may be configured so that it is provided in

FIG. 6 shows an example of offline data cartridge ejection processing. Under normal conditions, the data cartridge 8 stored in the self-container is locked by the locking mechanism 15 and cannot be removed. However, it may be necessary to remove the data cartridge 8 when offline, for example, for periodic maintenance inspection or diagnosis in the event of a failure. Therefore, the operation panel 2
7 and an eject processing section 28 are provided. From the operation panel 27 when ejecting the locked data cartridge 8 while offline.

Provide cartridge identification information and encrypted data.

As a result, the eject processing section 28 is activated.

The eject processing section 28 performs a cipher check similar to the cipher checking section 22. If the code is correct, the lock mechanism 15 is unlocked and the data cartridge 8 is ejected. If the cipher is incorrect, reject the request and do not unlock.

Although an example of a cartridge library system has been described above, the present invention can be similarly applied to other storage systems as long as they automatically manage cartridge-type storage media.

(g) Details of the invention As explained above, 9 according to the present invention, 1 for example.

When attempting to take out a data cartridge existing in a cartridge library device from a cell, it is locked and cannot be taken out unless a predetermined code is given, even if it is offline, preventing erroneous operation or theft. It becomes possible to protect data cartridges. Furthermore, even online, a specific data cartridge can be kept confidential by cryptographic checking.

[Brief explanation of drawings]

FIG. 1 is an explanatory diagram of a data cartridge, and FIG. 2 is a configuration example of a cartridge library system. FIG. 3 shows the configuration of an embodiment of the present invention, FIG. 4 is an explanatory diagram of the process at the time of cryptographic registration, FIG. show. In the figure, 4 is a cartridge library device, 7 is a cell,
8 is a data cartridge, 9 is a data recording mechanism, 15 is a lock mechanism, and 20 is a code recording section. 22 represents the encryption confirmation unit, 24 represents the protection control unit, 25 represents the protection information table, and 28 represents the ejection processing unit.0 Patent Applicant: Fujitsu Limited

Claims (1)

[Scope of Claims] A data storage device is provided with a plurality of cells, and data cartridges stored in the cells are loaded into a data recording mechanism at one time. A cartridge protection method in a cartridge type storage system for recording and reproducing data, which includes a cryptographic recording section that writes a cartridge protection identifier based on input cryptographic information into the data cartridge, and a cryptographic recording section that writes a cartridge protection identifier based on input cryptographic information into the data cartridge. a cartridge protection information storage unit that stores a cartridge protection identifier of the data cartridge in the cell; A code confirmation unit that compares the code information specified when using the data cartridge with the cartridge protection identifier in the IJ Tsuji protection information storage unit and determines whether or not it can be used; a locking mechanism that makes it impossible to remove the data cartridge; and a locking mechanism that prevents the data cartridge from being removed when the cryptographic information is input in response to an eject request for the data cartridge during offline C2 and is matched with the cartridge protection identifier in the cartridge protection information storage section. A data cartridge protection method characterized by comprising a lock release means for releasing the lock by the data cartridge.