Abstract: A file management apparatus accommodates removable storage media that store index data for use by a file system. The file management apparatus is used to read and write in these removable storage media. An information processing apparatus obtains and holds index data of each removable storage medium from the file management apparatus, and uses the index data to distinguish files recorded in the removable storage media. The file management apparatus determines the right time to make a backup of index data, based on a recovery time objective that specifies a duration of time for recovery from a system failure, and sends out a timing message indicating the determined right time. In response, the information processing apparatus causes the file management apparatus to make a backup in a specified removable storage medium.

Abstract: In a library system, a library apparatus detects replacement of a first drive by a second drive. The library apparatus sends management data describing the replacement of the first drive to a management apparatus. Based on relationships between the management data and storage media accommodated in the library apparatus, the management apparatus determines which of the storage media is to become unusable for reading data or writing data or both reading and writing data. The determined storage medium is designated as a migration source medium. The management apparatus then sends a data migration command to initiate data migration from the migration source medium to another storage medium. In response, the library apparatus migrates data from the specified migration source medium to another storage medium, based on the migration source information.

Abstract: A storage apparatus includes a key control part to judge a validity of a data access from a request source based on authorization information received therefrom and authorization information created from an enciphering key included in enciphering key information received from a key management apparatus, and a control part to make the data access to the recording medium using the enciphering key in response to an access request from the request source, if the validity of the data access is confirmed. The authorization information from the request source includes a unique code created from the enciphering key if an authentication is successful in the key management apparatus in response to an authentication request from the request source.

Abstract: A key data recording device includes a key data recording medium section which stores key data of the encrypted data; and a reading/writing section which reads and writes the key data from and into the key data recording medium section, which sections are contained in a cartridge casing accommodatable in a library unit. When the cartridge casing is irregularly ejected from the library unit, the key data recorded in the key data recording medium section is deleted. This configuration can enhance the confidentiality of encrypted data because the key data is not leaked even when the recording medium in which key data of the encrypted data is recorded is carried away.

Abstract: In a library system, a library apparatus detects replacement of a first drive by a second drive. The library apparatus sends management data describing the replacement of the first drive to a management apparatus. Based on relationships between the management data and storage media accommodated in the library apparatus, the management apparatus determines which of the storage media is to become unusable for reading data or writing data or both reading and writing data. The determined storage medium is designated as a migration source medium. The management apparatus then sends a data migration command to initiate data migration from the migration source medium to another storage medium. In response, the library apparatus migrates data from the specified migration source medium to another storage medium, based on the migration source information.

Abstract: A key data recording device includes a key data recording medium section which stores key data of the encrypted data; and a reading/writing section which reads and writes the key data from and into the key data recording medium section, which sections are contained in a cartridge casing accommodatable in a library unit. When the cartridge casing is irregularly ejected from the library unit, the key data recorded in the key data recording medium section is deleted. This configuration can enhance the confidentiality of encrypted data because the key data is not leaked even when the recording medium in which key data of the encrypted data is recorded is carried away.

Abstract: A storage apparatus includes a key control part to judge a validity of a data access from a request source based on authorization information received therefrom and authorization information created from an enciphering key included in enciphering key information received from a key management apparatus, and a control part to make the data access to the recording medium using the enciphering key in response to an access request from the request source, if the validity of the data access is confirmed. The authorization information from the request source includes a unique code created from the enciphering key if an authentication is successful in the key management apparatus in response to an authentication request from the request source.

Abstract: The invention provides a library apparatus wherein provisions are made to be able to continue the entire operation of the library apparatus uninterrupted if a failure occurs in any one of the constituent elements of the library apparatus, with further provisions made to be able to identify the source of the failure. The library apparatus 1 comprises library controllers Lct1 and Lct2 configured in a redundant configuration and drive command paths P1 and P2 configured in a redundant configuration, wherein a library controller port on the library controller Lctl is configured redundantly by duplicating a port 14 with a port 15, the ports 14 and 15 being connected to the redundantly configured drive command paths P1 and P2, respectively, and a library controller port on the library controller Lct2 is configured redundantly by duplicating a port 24 with a port 25, the ports 24 and 25 being connected to the redundantly configured drive command paths P1 and P2, respectively.