US 11,843,692 B2
On-cartridge encryption key storage for cartridge-based library
Riyan Alex Mendonsa, Minneapolis, MN (US); Saravanan Nagarajan, Singapore (SG); and Kenneth A. Haapala, Minneapolis, MN (US)
Assigned to SEAGATE TECHNOLOGY LLC, Fremont, CA (US)
Filed by Seagate Technology LLC, Cupertino, CA (US)
Filed on Mar. 2, 2020, as Appl. No. 16/806,920.
Prior Publication US 2021/0273786 A1, Sep. 2, 2021
Int. Cl. H04L 9/08 (2006.01); H04L 9/32 (2006.01); G11B 33/12 (2006.01); G11C 16/10 (2006.01); G07C 9/00 (2020.01); G11B 15/68 (2006.01)
CPC H04L 9/0825 (2013.01) [G07C 9/00182 (2013.01); G11B 15/6835 (2013.01); G11B 33/124 (2013.01); G11C 16/10 (2013.01); H04L 9/0866 (2013.01); H04L 9/0894 (2013.01); H04L 9/3263 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A storage system comprising:
control electronics on a shared control board adapted to physically and removably couple with and provide data access to each one of a plurality of storage cartridges in a storage library, the control electronics adapted to:
store a mapping that associates each one of the plurality of storage cartridges with a designated range of logical block addresses;
retrieve a unique device identifier of a target storage cartridge from the target storage cartridge in response to detecting a new coupling between the target storage cartridge and the shared control board, the target storage cartridge being one of the plurality of storage cartridges;
associate a public key with the unique device identifier of the target storage cartridge;
in response to receiving a host-initiated read/write command and determining based on the mapping that a logical block address identified by the host-initiated read/write command corresponds to the target storage cartridge, transmit the public key from the shared control board to the target storage cartridge identified by the unique device identifier; and
an encryption circuit within the target storage cartridge adapted to:
authenticate, at the target storage cartridge, the transmitted public key against a stored public key;
access an encryption key stored within the target storage cartridge responsive to successful authentication of the public key; and
utilize the encryption key, at the target storage cartridge, to encrypt or decrypt data identified by the host-initiated read/write command received at the shared control board prior to transmission of the public key.