Abstract: Systems and methods for managing errors on a magnetic tape having a plurality of partitions accessed by a tape drive having an associated tape drive processor in communication with a host computer having an associated host processor include receiving mapping information from the host computer that designates at least first and second logically adjacent partitions for reading/writing consecutive data, receiving a read/write request to transfer the consecutive data for the first and second partitions, detecting a data error when attempting to read/write the data for the second partition and communicating a corresponding data error message to the host computer, and receiving modified mapping information from the host computer that designates a third partition as logically adjacent to the first partition for reading/writing the consecutive data.

Abstract: A method of protecting a media key including obtaining the media key, obtaining an auxiliary key, calculating a split key using the media key and the auxiliary key, encrypting the split key using a wrap key to generate an encrypted split key, assembling the encrypted split key and a communication key to obtain a data bundle, and sending the data bundle to a token, where the media key is extracted from the data bundle on the token to protect data on a storage device.

Abstract: A method of protecting a media key including obtaining the media key, obtaining an auxiliary key, calculating a split key using the media key and the auxiliary key, encrypting the split key using a wrap key to generate an encrypted split key, assembling the encrypted split key and a communication key to obtain a data bundle, and sending the data bundle to a token, where the media key is extracted from the data bundle on the token to protect data on a storage device.

Abstract: A hand-held token for secure conveyance of encryption keys includes memory for holding a media key and at least one device key. Control logic reads the media key from memory, encrypts the media key based on the device key, and transmits the encrypted media key to a data storage device. The data storage device decrypts the encrypted media key using its own device key, which may have previously been downloaded from a token.

Abstract: A data storage system for use with a plurality of tape cartridges is provided. Each tape cartridge includes a length of tape media and an amount of flash memory. The data storage system includes a tape cartridge library having a plurality of storage cells. Each storage cell is configured to store a tape cartridge. The tape cartridge library further includes a plurality of tape drives. Each tape drive is configured to access a tape cartridge when the tape cartridge is received in the tape drive. The system further includes a robotic tape mover and a flash memory access mechanism. The robotic tape mover moves tape cartridges between the plurality of storage cells and the plurality of tape drives. The flash memory access mechanism is configured in the tape cartridge library to access the flash memory of a tape cartridge when the tape cartridge is in the tape cartridge library.

Abstract: A data storage system for use with a plurality of tape cartridges is provided. Each tape cartridge includes a length of tape media and an amount of flash memory. The data storage system includes a tape cartridge library having a plurality of storage cells. Each storage cell is configured to store a tape cartridge. The tape cartridge library further includes a plurality of tape drives. Each tape drive is configured to access a tape cartridge when the tape cartridge is received in the tape drive. The system further includes a robotic tape mover and a flash memory access mechanism. The robotic tape mover moves tape cartridges between the plurality of storage cells and the plurality of tape drives. The flash memory access mechanism is configured in the tape cartridge library to access the flash memory of a tape cartridge when the tape cartridge is in the tape cartridge library.

Abstract: A data encryption system with encryption integrity verification includes an encryption engine configured to receive an unencrypted data packet and generate an encrypted data packet based at least in part on the unencrypted data packet. The system also includes a decryption engine in electronic communication with the encryption engine, the decryption engine configured to receive the encrypted data packet and generate a decrypted data packet based at least in part on the encrypted data packet. The system further includes a comparator in electronic communication with the encryption engine and the decryption engine, the comparator configured to receive the unencrypted and decrypted data packets, determine whether the unencrypted and decrypted data packets are identical, and present the encrypted data packet as an output when the unencrypted and decrypted data packets are identical.

Abstract: A multiple field nonce particularly suited for use in encryption algorithms associated with data storage has at least one field unique to each data storage device to avoid the possibility of the same nonce value being used to store more than one data string. Additional fields may be based on the number of times at least one encryption key is associated with the storage device and on a number assigned to the particular string of data.

Abstract: A system, method and data storage device for encrypting data to provide at-rest data encryption of data in the data storage device. The system includes a compression engine for receiving a host data stream packet and selectively generating a compressed data packet, and an encryption engine in electronic communication with the compression engine for receiving an unencrypted data packet from the compression engine. The unencrypted data packet comprises the compressed data packet when the compression engine generates the compressed data packet. The unencrypted data packet comprises the host data packet when the compression engine does not generate the compressed data packet. The encryption engine generates an encrypted data packet having an encrypted component corresponding to the unencrypted data packet and a set of meta data indicative of one or more characteristic of the encrypted data packet.

Abstract: Systems and methods for storing data on a tape medium and coping with defective regions on the tape medium are provided. The method includes: writing a plurality of envelopes of data onto the tape medium, each envelope of data comprising a plurality of blocks of data; detecting a defective region of the tape medium; writing a boundary start field after the defective region, the boundary start field indicating that the defective region has been passed; and writing a boundary end field before the defective region of the tape medium, the boundary end field indicating that the defective region follows the boundary end field.

Abstract: A system and method of operating a storage system is provided. The storage system includes a tape drive for reading and writing data to a magnetic tape medium of a tape storage media device, and an auxiliary memory emulator for receiving I/O commands to perform I/O operations on an auxiliary memory and for rerouting the commands to perform the I/O operations on the magnetic tape medium of the tape storage media device. The method includes receiving I/O commands to perform I/O operations on an auxiliary memory on a tape storage media device, wherein the tape storage media device includes a magnetic tape medium and does not include the auxiliary memory, and routing the I/O commands to the magnetic tape medium provided in the tape storage media device.

Abstract: A system and method of operating a storage system is provided. The storage system includes a tape drive for reading and writing data to a magnetic tape medium of a tape storage media device, and an auxiliary memory emulator for receiving I/O commands to perform I/O operations on an auxiliary memory and for rerouting the commands to perform the I/O operations on the magnetic tape medium of the tape storage media device. The method includes receiving I/O commands to perform I/O operations on an auxiliary memory on a tape storage media device, wherein the tape storage media device includes a magnetic tape medium and does not include the auxiliary memory, and routing the I/O commands to the magnetic tape medium provided in the tape storage media device.