System and method for data encryption keys and indicators
Systems and methods are provided for encrypting data, generating encryption keys, and generating encryption indicators. The encryption indicators may be stored on a storage medium in a location separate from the location of stored encrypted data. The encryption indicator includes information indicative of the encryption key used for encrypting and decrypting the data. In one example, the storage medium is a tape, and the encryption indicator is stored in the user header label of the tape.
1. A data storage device, comprising:
a storage medium, wherein the storage medium comprises a header portion;
a set of encrypted data stored on the storage medium;
an encryption key operable to enable a user to decrypt the encrypted data; and
an encryption indicator corresponding to the encryption key, the encryption indicator stored in the header portion of the storage medium, wherein the header portion is separate from a location of the set of encrypted data.
2. The data storage device of claim 1 , wherein the encryption key is stored on the storage medium in a location separate from a location of the set of encrypted data.
3. The data storage device of claim 2 , wherein the encryption key is stored in the same location as the encryption indicator.
4. The data storage device of claim 3 , wherein the encryption key is encrypted.
5. The data storage device of claim 2 , wherein the encryption key is stored on the storage medium in a location adjacent a location of the set of encrypted data.
6. The data storage device of claim 1 , wherein the encryption key is stored on the storage medium within the set of encrypted data.
7. The data storage device of claim 1 , wherein the storage medium is tape.
8. The data storage device of claim 1 , wherein the storage medium is a storage disc.
9. The data storage device of claim 1 , wherein the set of encrypted data is stored in a first pre-designated area on the storage medium and the encryption indicator is stored in a second pre-designated area on the storage medium.
10. The data storage device of claim 9 , wherein the second pre-designated area comprises a label.
11. The data storage device of claim 9 , wherein the second pre-designated area comprises a user label.
12. The data storage device of claim 9 , wherein the second pre-designated area comprises a user header label.
13. The data storage device of claim 9 , wherein the second pre-designated area comprises a user trailer label.
14. The data storage device of claim 1 , wherein the encryption indicator indicates the existence of the encryption key.
15. The data storage device of claim 1 , wherein the encryption indicator indicates a location of the encryption key.
16. The data storage device of claim 1 , wherein the encryption indicator indicates a type of the encryption key.
17. The data storage device of claim 1 , wherein the encryption indicator comprises unencrypted data.
18. A data encryption system for encrypting data, the system comprising:
a database;
an encryption application operable to encrypt data in a file being created on a storage medium, wherein the storage medium comprises a header portion; and
an encryption utility operable to recognize an encryption request and intercept a file creation process if the encryption request indicates that the data is to be encrypted, and further operable to call the encryption application to encrypt the data;
the encryption application further operable to generate an encryption key corresponding to the encrypted data to enable a user to decrypt the data;
the encryption utility further operable to generate encryption indicator information corresponding to the encryption key, the encryption indicator information being stored in the header portion of the storage medium, wherein the header portion is separate from a location wherein the encrypted data is stored.
19. The data encryption system of claim 18 , wherein the encryption key is stored in the database in a key table and wherein the encryption indicator information enables retrieval of the encryption key.
20. The data encryption system of claim 18 , wherein the encryption indicator information includes an encryption key identifier.
21. The data encryption system of claim 18 , wherein the encryption indicator information is stored in a user label on the storage medium.
22. The data encryption system of claim 18 , wherein the encryption indicator information is stored in a user header label on the storage medium.
23. The data encryption system of claim 18 , wherein the encryption indicator information is stored in a user trailer label on the storage medium.
24. A method for storing data on a storage medium, comprising:
determining whether the data is to be encrypted;
if the data is to be encrypted, generating an encryption key;
generating an encryption indicator associated with the encryption key;
encrypting the data and storing the encrypted data on the storage medium in a first location; and
storing the encryption indicator on the storage medium in a header portion of the storage medium, wherein the header portion is separate from the first location.
25. The method of claim 24 , wherein the encryption indicator is not encrypted.
26. The method of claim 24 , wherein the encryption key is stored in a third location on the storage medium.
27. The method of claim 26 , wherein the first location is adjacent the third location.
28. The method of claim 24 , wherein the encryption key is stored in the second location.
29. The method of claim 28 , wherein the encryption key is encrypted.
30. The method of claim 24 , wherein the encryption key is stored in the encrypted data.
31. The method of claim 24 , wherein the encryption indicator is stored in a user label on the storage medium.
32. The method of claim 24 , wherein the encryption indicator is stored in a user header label on the storage medium.
33. The method of claim 24 , wherein the encryption indicator is stored in a user trailer label on the storage medium.