Devices, methods and systems for secure data transfers
Methods, systems and devices for securely transferring digital data from a first repository to a second repository are disclosed. Per at least one embodiment, a second repository is identified with a human recognizable identifier and an internal identifier associated with such second repository is determined. When a data transfer is desired, a work order associating the data to be transferred and identifying the second repository based on each of the human identifier and the internal identifier is generated. Such work order is utilized by a data port device to open normally closed communications port to accomplish the transfer of the data to the second repository when the identity of such second repository is confirmed by the data port device. A data integrity check confirms that only the designated to be transferred data was actually transferred to the second repository designated in the work order.
1. A method for securely transferring digital data from a first repository to a second repository comprising:
establishing a first communications link between a data port device and a computer system, wherein the data port device includes at least one communications port configurable for establishing a communications link between a first repository and a second repository;
receiving at the data port device a work order from the computer, wherein the work order specifies an identifier associated with the second repository and identifies a set of digital data to be transferred from the first repository to the second repository;
establishing a second communications link between the data port device and a second device;
determining whether the second device is the second repository identified in the work order; and
when the result of the determining indicates that the second device is the second repository, further performing the operations of:
establishing a third communications link between the data port device and the first repository;
opening the at least one communications port in the data port device to establish a communications path between the first repository and the second repository, wherein the communications path includes the second communications link and the third communications link;
transferring the set of digital data from the first repository to the second repository via the communications path; and
determining whether data transferred from the first repository to the second repository satisfies a data integrity requirement.
2. The method of claim 1 , wherein the work order specifies at least one first identifier associated with the second repository, and the operation of determining whether the second device is the second repository comprises:
querying the second device for a device identifier;
comparing the at least one first identifier specified in the work order with the device identifier returned by the second device in response to the querying; and
when the at least one first identifier specified in the work order matches the device identifier returned by the second device in response to the querying, recognizing the second device as the second repository designated in the work order.
3. The method of claim 2 , wherein the at least one first identifier comprises an internal identifier associated with the second repository.
4. The method of claim 2 , wherein the at least one first identifier comprises a serial number for the second repository.
5. The method of claim 4 , wherein the serial number is hard coded into the second repository so as to be unmodifiable.
6. The method of claim 3 , wherein the work order specifies at least one second identifier associated with the second repository, and the operation of determining whether the second device is the second repository comprises:
querying the second device for a second device identifier;
comparing the at least one second identifier specified in the work order with the second device identifier returned by the second device in response to the querying; and
when each of the at least one first identifier specified in the work order matches the first device identifier returned by the second device and the at least one second identifier specified in the work order matches the second device identifier, as returned by the second device in response to the querying, recognizing the second device as the second repository designated in the work order.
7. The method of claim 6 , wherein the at least one second identifier comprises a first human recognizable identifier.
8. The method of claim 7 , wherein the operation of querying the device for a second device identifier comprises:
scanning the second device for a second human recognizable identifier.
9. The method of claim 8 , wherein the first human recognizable identifier and the second human recognizable identifier are the same and comprise at least one of a bar code, a quick response code and a radio frequency identification tag.
10. The method of claim 1 , wherein the second repository is a hard disc drive.
11. The method of claim 1 , wherein the computer system comprises a workflow computing system.
12. The method of claim 1 , wherein the second communications link between the data port device and a second device comprises a direct, hard-wired connection.
13. The method of claim 1 , wherein the operation of determining whether data transferred from the first repository to the second repository satisfies a data integrity requirement comprises:
calculating, for a first set of the digital data stored in the first repository pre-transfer, a pre-transfer cryptographic hash function;
calculating, for a second set of digital data stored in the second repository post-transfer, a post-transfer cryptographic hash function;
comparing the pre-transfer cryptographic hash function with the post-transfer cryptographic hash function; and
when the comparison of the pre-transfer and post-transfer cryptographic hash functions match, closing the at least one communications port in the data port device.
14. The method of claim 13 , wherein the pre and post transfer cryptographic hash functions are calculated using an MD-5 message digest algorithm.
15. A method for securely transferring digital data from a first repository to a second repository comprising:
receiving a second repository into a repository library;
marking the second repository with a human recognizable identifier;
determining an internal identifier associated with the second repository;
registering the second repository in a database, wherein the database identifies the second repository using the human recognizable identifier and the internal identifier;
communicating the database to a workflow computing system;
selecting, using the workflow computing system, the second repository as a destination for a transfer of a set of digital data from a first repository;
establishing a first communications link between a data port device and the workflow computing system, wherein the data port device includes at least one communications port configurable for establishing a communications link between the first repository and the second repository;
receiving at the data port device a work order from the workflow computing system, wherein the work order specifies the second repository based on the human recognizable identifier and the internal identifier associated therewith in the database, and the work order identifies the set of digital data to be transferred from the first repository to the second repository;
establishing a second communications link between the data port device and a second device;
determining whether the second device is the second repository identified in the work order; and
when the result of the determining results in an identification of the second device as the second repository, further performing the operations of:
establishing a third communications link between the data port device and the first repository;
opening the at least one communications port in the data port device to establish a communications path between the first repository and the second repository, wherein the communications path includes the second communications link and the third communications link;
transferring the set of digital data from the first repository to the second repository via the communications path; and
determining whether the set of digital data transferred from the first repository to the second repository satisfies a data integrity requirement.
16. The method of claim 15 , wherein the operation of determining whether the second device is the second repository identified in the work order comprises:
querying the second device for an internal identifier; and
comparing the internal identifier returned by the second device with the internal identifier specified in the work order.
17. The method of claim 16 , wherein the operation of determining whether the second device is the second repository identified in the work order comprises:
querying of the second device for a human recognizable identifier;
comparing the human recognizable identifier returned by the second device with the human recognizable identifier specified in the work order; and
identifying the second device as the second repository when the internal identifier and human recognizable identifier returned by the second device match the internal identifier and human recognizable identifiers specified in the work order.
18. The method of claim 16 , wherein the human recognizable identifier used to mark the second repository comprises at least one of a bar code, a QR code and an RFID tag.
19. The method of claim 17 , wherein the internal identifier associated with the second repository comprises a serial number for the second repository, wherein the serial number is hard coded into the second repository so as to be unmodifiable.
20. The method of claim 15 , wherein the second repository is a hard disc drive.