Media-following encryption policy control
View Patent ↗Example articles of manufacture, methods, and systems facilitate having encryption policy follow an article of manufacture like a tape cartridge. One example article of manufacture includes a media portion (e.g., tape) and a non-media portion (e.g., housing). The media portion is configured to store machine readable information. The article of manufacture could be a tape, a disk, a memory, and other computer readable media. The article of manufacture also includes an encryption policy information indicator. The encryption policy information indicator can be configured to store information that controls an encryption policy associated with the article of manufacture. Therefore, encryption policy can, for example, follow a tape cartridge rather than be resident solely in a controlling application (e.g., tape library).
1. An article of manufacture, comprising:
a removable machine readable media item comprising a media portion and a non-media portion, where the media portion stores machine readable information; and
an encryption policy information indicator that stores information to control an apparatus to perform an encryption policy associated with the removable machine readable media item;
where the article of manufacture is used with an apparatus that selectively encrypts or decrypts the machine readable information as controlled by the encryption policy and an encryption key, the encryption policy and the encryption key being separate items,
where the encryption policy information indicator is a notch in a housing of the removable machine readable media item, or a texture on the housing of the removable machine readable media item,
where the encryption policy indicator controls a time at which machine readable information stored on the media portion is to be encrypted by the apparatus,
where the encryption policy indicator controls how machine readable information stored on the media portion is to be encrypted by the apparatus,
where the encryption policy indicator controls a time at which machine readable information stored on the media portion is to be decrypted by the apparatus, and
where the encryption policy indicator controls how machine readable information stored on the media portion is to be decrypted by the apparatus.
2. The article of manufacture of claim 1 , the apparatus being a tape drive, and where the encryption policy indicator directly controls hardware in the tape drive, where the hardware in the tape drive executes the encryption policy.
3. The article of manufacture of claim 1 , where the removable machine readable media item is one of, a tape, a tape cartridge, a disk, a compact disk (CD), a drive, a solid state drive (SSD), a hard drive, a universal serial bus (USB) drive, a solid state cartridge, a memory stick, and a memory card.
4. The article of manufacture of claim 1 , where the encryption policy indicator is user configurable.
5. The article of manufacture of claim 1 , where a value stored by the encryption policy indicator is directly user discernible through the sense of touch or the sense of sight.
6. The article of manufacture of claim 1 , where the encryption policy indicator is machine readable information encoded on the media portion.
7. The article of manufacture of claim 1 , where the encryption policy information indicator is provided to an external encryption policy control unit that executes the encryption policy.
8. The article of manufacture of claim 1 , where the encryption policy indicator controls how machine readable information stored on the media portion is to be encrypted by the apparatus by providing information identifying an algorithm to be used for encrypting the machine readable information.
9. The article of manufacture of claim 1 , where the encryption policy indicator controls how machine readable information stored on the media portion is to be decrypted by the apparatus by providing information identifying an algorithm to be used for decrypting the machine readable information.
10. A method, comprising:
acquiring encryption policy information from a portable computer readable medium, where the portable computer readable medium comprises an encryption policy information indicator that stores information to control an apparatus to perform an encryption policy associated with the portable computer readable medium; and
automatically controlling a drive with respect to encryption policy for the portable computer readable medium based on the encryption policy information and on an encryption key, the drive being configured to read and write the portable computer readable medium,
where automatically controlling the drive comprises selectively encrypting or decrypting data on the portable computer readable medium as a function of the encryption policy information and an encryption key, the encryption policy information and the encryption key being separate items,
where the encryption policy information controls a time at which data stored on the computer readable medium is to be encrypted by the drive,
where the encryption policy information controls how data stored on the computer readable medium is to be encrypted by the drive,
where the encryption policy information controls a time at which data stored on the computer readable medium is to be decrypted by the drive,
where the encryption policy information controls how data stored on the computer readable medium is to be decrypted by the drive.
11. The method of claim 10 , comprising:
establishing the encryption policy information on the portable computer readable medium.
12. The method of claim 11 , where establishing the encryption policy information on the portable computer readable medium includes establishing a notch on the portable computer readable medium, or establishing a texture for the portable computer readable medium.
13. The method of claim 12 , where acquiring the encryption policy information from the portable computer readable medium comprises analyzing a notch on the portable computer readable medium, or analyzing a texture of the portable computer readable medium.
14. The method of claim 10 , where automatically controlling the drive with respect to encryption policy for the portable computer readable medium based on the encryption policy information comprises controlling an encryption policy logic on the drive based on the encryption policy information.
15. The method of claim 10 ,
where the portable computer readable medium is a tape cartridge,
where the drive is a tape drive,
where configuring the tape cartridge with the encryption policy information comprises configuring a notch in the housing of the tape cartridge, or configuring a texture on the housing of the tape cartridge,
where acquiring the encryption policy information from the tape cartridge comprises one or more of, reading from the notch, and reading from the texture, and
where automatically controlling the tape drive with respect to encryption policy for the tape cartridge based on the encryption policy information comprises controlling the tape drive to selectively perform encryption functions on the tape cartridge as a function of the encryption policy information.