ENABLING RECORDING AND COPYING DATA
A data encryption key may be generated for encrypting data content. The data encryption key includes multiple portions. For example, the data encryption key may be generated by combining a drive seed and a media seed where the drive seed includes a value that is unique to the drive reading data content or a group of drives sharing the same drive seed. The media seed may include a value unique to the media from which data content may be read. The data encryption key thus generated may be unique to a combination of a specific drive or group of drives and a media or group of media.
1 . A method of recording data comprising:
receiving a data key from a client associated with data content;
identifying a drive seed corresponding to a drive based on the receiving;
determining a media seed based on the data key and the drive seed, the media seed associated with the data content;
storing the media seed corresponding to the data content;
receiving the data content which is encrypted according to the data key;
storing the data content.
2 . The method of claim 1 further comprising decrypting the received data content prior to storing the data content.
3 . The method of claim 1 further comprising authenticating at least one of the client and the drive.
4 . The method of claim 3 wherein the authenticating includes creating a two-way authentication between the client and drive.
5 . The method of claim 4 wherein the authenticating further includes encrypting the transfer of the data key between the client and the drive using the two-way authentication.
6 . The method of claim 3 wherein authenticating the client includes:
receiving a host certificate from the client, the host certificate including at least one authorization bit;
identifying a setting of the at least one bit,
wherein identifying the data key is based on identifying the setting of the at least one bit.
7 . The method of claim 6 wherein the step of identifying the data key comprises validating the data key according to the at least one authorization bit that the host may use the data key.
8 . The method of claim 1 wherein the drive seed is at least statistically unique for the drive.
9 . The method of claim 1 wherein the drive seed is statistically unique for a plurality of drives, wherein each drive in the plurality of drives is capable of deriving the same data key for a given media seed.
10 . The method of claim 1 wherein the data content is stored on a storage medium and the step of storing the media seed includes storing the media seed on the storage medium.
11 . The method of claim 10 wherein the storage medium is partitioned into a plurality of partitions, the media seed being selected from a plurality of media seeds, each of the media seeds in the plurality of media seeds corresponding to a partition in the plurality of partitions.
12 . The method of claim 1 wherein the data key comprises a combination of the drive seed and the media seed.
13 . The method of claim 1 wherein determining the media seed based on the data key and the drive seed involves includes executing a two-way function.
14 . The method of claim 13 wherein the two-way function includes:
one of encrypting or decrypting the data key via the drive seed to generate the media seed; and
the other of encrypting or decrypting the media seed via the drive seed to generate the data key.
15 . A method for encrypting data content via a data key comprising:
receiving a data input from a storage medium containing data content, the data input containing a media seed corresponding to the data content;
identifying a drive seed corresponding to a drive for reading the data content of the storage medium;
combining the media seed and the drive seed to generate a data key;
encrypting the data content based on the generated data key.
16 . The method of claim 15 wherein the drive seed is private and non-accessible to an external entity.
17 . The method of claim 15 wherein the drive seed is unique to a plurality of drives, wherein the drive is selected from the plurality of drives, each of the drives in the plurality of drives has the same drive seed.
18 . The method of claim 15 wherein the storage medium is partitioned into a plurality of partitions.
19 . The method of claim 18 wherein the media seed is selected from a plurality of media seeds, each of the media seeds in the plurality of media seeds corresponding to each of the partitions in the plurality of partitions.
20 . A method for decrypting data content comprising:
receiving a data input from a storage medium containing data content, the data input containing a media seed corresponding to the data content, the data content being encrypted on the medium with the data key;
identifying a drive seed corresponding to a drive for reading the data content of the storage medium;
combining the media seed and the drive seed to generate a data key;
decrypting the data content based on the generated data key.