Data storage device data recovery using remote network storage

1. A data storage device comprising:

a storage medium;

a host data channel configured for data transfer with a host system;

a network data channel configured for data transfer with a network storage system over a network; and

a storage device controller, comprising at least one processor and at least one memory, the at least one processor configured to, alone or in combination:

determine a high protection partition in the storage medium;

determine a write request for a target data unit in the high protection partition;

store the target data unit in the high protection partition in the storage medium;

establish a secure data transfer connection to the network storage system over the network data channel;

replicate, responsive to establishing the secure data transfer connection, the target data unit to the network storage system;

determine a read request for the target data unit;

determine, responsive to attempting to read the target data unit from the storage medium, a read error for the target data unit;

request, over the secure data transfer connection, the target data unit from the network storage system;

receive, over the secure data transfer connection, the target data unit from the network storage system;

rewrite the target data unit to the storage medium; and

return, responsive to the read request and the received target data unit, the target data unit.

2. The data storage device of claim 1 , wherein:

the at least one processor is further configured to, alone or in combination:

store device credentials for authenticating access to the network storage system; and

store encryption credentials for establishing the secure data transfer connection; and

establishing the secure data transfer connection includes:

reading the encryption credentials;

initiating, using the encryption credentials, the secure data transfer connection with the network storage system;

reading the device credentials; and

sending the device credentials to the network storage system to authenticate access to the target data unit stored in the network storage system.

3. The data storage device of claim 2 , wherein the storage medium comprises a device configuration partition configured to store the device credentials and the encryption credentials.

4. The data storage device of claim 2 , wherein the at least one processor is further configured to, alone or in combination, store a network address for the network storage system.

5. The data storage device of claim 2 , wherein the at least one processor is further configured to, alone or in combination, prevent access to the device credentials and the encryption credentials by the host system.

6. The data storage device of claim 1 , further comprising:

a network interface configured to:

connect to the network for the network data channel; and

extablish a direct secure data transfer connection between the data storage device and the network storage system that is separate from the host data channel, wherein establishing the direct secure data transfer connection with the network storage system bypasses the host system.

7. The data storage device of claim 1 , wherein:

the at least one processor is further configured to, alone or in combination:

store data units to the storage medium in erase blocks; and

selectively replicate data units in erase blocks to the network storage system; and

requesting the target data unit from the network storage system includes requesting a target erase block that includes at least a portion of the target data unit.

8. The data storage device of claim 1 , wherein:

the read request is a host read request;

the target data unit is a host data unit; and

the at least one processor is further configured to alone or in combination, return, responsive to the read request and the received target data unit, the received target data unit to the host system prior to rewriting the target data unit to the storage medium.

9. The data storage device of claim 1 , wherein:

establishing the secure data transfer connection fails at a first time;

the first time is responsive to the read request; and

the at least one processor is further configured to, alone or in combination:

set, responsive to failing to establish the secure data transfer connection at the first time, a recovery indicator for the target data unit;

establish, at a second time after the first time, the secure data transfer connection; and

initiate, responsive to establishing the secure data transfer connection at the second time, the request for the target data unit from the network storage system.

10. The data storage device of claim 1 , wherein the at least one processor is further configured to, alone or in combination:

terminate, responsive to replacing the target data unit to the network storage system, the secure data transfer connection; and

establish, responsive to determining the read error for the target data unit and prior to requesting the target data unit from the network storage system, the secure data transfer connection.

11. A computer-implemented method, comprising:

configuring a data storage device for data transfer with a host system over a host data channel, wherein the data storage device includes a storage medium;

determining, by the data storage device, a high protection partition in the storage medium;

determining, by the data storage device, a write request for a target data unit in the high protection partition;

storing, by the data storage device, the target data unit in the high protection partition in the storage medium;

establishing, from the data storage device, a secure data transfer connection to a network storage system over a network data channel;

replicating, by the data storage device and responsive to establishing a secure data transfer connection, the target data unit to the network storage system,

determining, by the data storage device, a read request for the target data unit stored in the storage medium;

determining, by the data storage device and responsove to attempting to read the target data unit from the storage medium, a read error for the target data unit;

requesting, by the data storage device and over the secure data transfer connection, the target data unit from the network storage system;

receiving, by the data storage device and over the secure data transfer connection, the target data unit from the network storage system;

rewriting, by the data storage device, the target data unit to the storage medium; and

returning, responsive to the read request and the received target data unit, the target data unit.

12. The computer-implemented method of claim 11 , further comprising:

storing, by the data storage device, device credentials for authenticating access to the network storage system;

storing, by the data storage device, encryption credentials for establishing the secure data transfer connection;

reading, by the data storage device, the encryption credentials;

initiating, by the data storage device and using the encryption credentials, the secure data transfer connection with the network storage system;

reading, by the data storage device, the device credentials; and

sending, by the data storage device, the device credentials to the network storage system to authenticate access to the target data unit stored in the network storage system.

13. The computer-implemented method of claim 12 , further comprising:

storing, by the data storage device, a network address for the network storage system; and

sending, by the data storage device, a connection request to the network address for the network storage system.

14. The computer-implemented method of claim 11 , further comprising:

configuring a storage device driver to establish the secure data transfer connection using a network interface of the host system.

15. The computer-implemented method of claim 11 , further comprising:

configuring a network interface of the data storage device for the network data channel, wherein:

the network data channel is different than the host data channel; and

establishing the secure data transfer connection with the network storage system bypasses the host system.

16. The computer-implemented method of claim 11 , further comprising:

storing, by the data storage device, data units to the storage medium in erase blocks; and

selectively replicating, by the data storage device, data units in erase blocks to the network storage system, wherein requesting the target data unit from the network storage system includes requesting a target erase block that includes at least a portion of the target data unit.

17. The computer-implemented method of claim 11 , further comprising:

returning, by the data storage device and responsive to the received target data unit, the received target data unit to the host system prior to rewriting the target data unit to the storage medium, wherein:

the read request is a host read request; and

the target data unit is a host data unit.

18. The computer-implemented method of claim 11 , further comprising:

failing, by the data storage device at a first time, to establish the secure data transfer connection, wherein the first time is responsive to the read request;

setting, by the data storage device and responsive to failing to establish the secure data transfer connection at the first time, a recovery indicator for the target data unit;

establishing, by the data storage device and at a second time after the first time, the secure data transfer connection; and

initiating, by the data storage device and responsive to establishing the secure data transfer connection at the second time, the request for the target data unit from the network storage system.

19. The computer-implemented method of claim 11 , further comprising:

terminating, responsive to replicating the target data unit to the network storage system, the second data transfer connection; and

establishing, responsive to determining the read error for the target data unit and prior to requesting the target data unit from the network storage system, the secure data transfer connection.

20. A system, comprising:

a host system;

a network storage system;

a data storage device comprising:

a storage medium;

a host data channel configured for data transfer with the host system; and

a network data channel configured for data transfer with the network storage system over a network;

means for determining, in the data storage device, a read request for a target data unit from the host system;

means for determining, in the data storage device and responsive to attempting to read the target data unit from the storage medium, a read error for the target data unit;

means for establishing a secure data transfer connection to the network storage system over the network data channel;

means for determining failure, by the data storage device at a first time, to establish the secure data transfer connection, wherein the first time is responsive to the read request;

means for setting, by the data storage device and responsive to failing to establish the secure data transfer connection at the first time, a recovery indicator for the target data unit;

means for establishing, by the data storage device and at a second time after the first time, the secure data transfer connection;

means for requesting, over the secure data transfer connection and responsive to establishing the secure data transfer connection at the second time, the target data unit from the network storage system;

means for receiving, over the secure data transfer connection, the target data unit from the network storage system;

means for rewriting, by the data storage device, the target data unit to the storage medium; and

means for returning, responsive to the read request and the received target data unit, the target data unit.