Abstract: Security is provided for a data set stored in a data storage canister. The data set has a data size when received for storage within the canister. At least one data security operation is performed on the received data set to generate secure data having a secure data size that may be different than the set data size. The secure data is stored on at least one data storage device within the canister. Any information about the secure data size is kept from the data producer sending the data set for storage.

Abstract: The present invention provides a flexible storage system through the use of portable, removable canisters holding multiple storage subsystems.

Abstract: A method and apparatus for managing power sequencing in a data storage system. The turn-on or spin-up sequence for the media drives in an array of media drives is selectively controlled such that the overall rush current is reduced. The individual drive components are characterized to determine a power profile for each such component. A closed-loop process is then used to manage and reduce peak power requirements when starting up or spinning up an array of media drives using the drive profiles. The media drives can also be organized as a plurality of sets of drives, and a power profile for each set of drives is used to manage and reduce peak power requirements.

Abstract: The present invention provides a flexible storage system through the use of portable, removable canisters holding multiple storage subsystems.

Abstract: A method, system and program for generating parity in a data storage system are provided. The invention comprises organizing an incoming data block into a specified number of data stripes and cascading the data stripes into a parity creation mechanism. The parity creation mechanism creates a specified number of parity stripes based on the data stripes, wherein the number of parity stripes is independent of the size of the data block. The parity creation mechanism can operate offline to reconstruct lost data stripes and parity stripes without using critical system resources, wherein the number of devices required for stripe reconstruction is less than the combined number of data stripes and parity stripes.

Abstract: In a storage area network (SAN) including a storage device accessible by a remote client, a method is provided. The SAN is configured to allow input/output (I/O) data transport over the SAN between the remote client and the storage device. The method includes establishing a write once read many (WORM) server in the SAN between the storage device and the remote client. Data is received at the WORM server from the remote client. The method further includes appending a digitally signed timestamp to the data, specifying a plurality of locations, and sending the data and the timestamp to the storage device. The data is sent as a series of data over the SAN such that the series of data is written to the storage device at the specified plurality of locations. Future writing of data to the specified plurality of locations is prevented.

Abstract: A secure, tamper- and forgery-proof peripheral for the storage of authenticated, dated computer data with an evidential value. The invention is based on an optionally-rewritable, fully-integrated storage peripheral which is functionally protected by an electronic system which only authorizes the addition of data in the unused free space and prohibits the deletion, alteration or overwriting of pre-recorded data. At the end of each file-write operation, the date, which is provided by a non-modifiable internal clock that is calibrated only at the time of production, is associated therewith. Each device includes a unique integrated secret internal digital identifier which is associated with a unique public identifier and the identifiers are used to personalize the device and render same unreproducible. The association can be verified using several third methods which never divulge the secret internal identifier.

Abstract: A method, system and program for generating parity in a data storage system are provided. The invention comprises organizing an incoming data block into a specified number of data stripes and cascading the data stripes into a parity creation mechanism. The parity creation mechanism creates a specified number of parity stripes based on the data stripes, wherein the number of parity stripes is independent of the size of the data block. The parity creation mechanism can operate offline to reconstruct lost data stripes and parity stripes without using critical system resources, wherein the number of devices required for stripe reconstruction is less than the combined number of data stripes and parity stripes.

Abstract: Security is provided for a data set stored in a data storage canister. The data set has a data size when received for storage within the canister. At least one data security operation is performed on the received data set to generate secure data having a secure data size that may be different than the set data size. The secure data is stored on at least one data storage device within the canister. Any information about the secure data size is kept from the data producer sending the data set for storage.

Abstract: Disclosed is a intelligent light source that is capable of providing a uniform illumination image across the surface of an illuminated object analyzed by an optical detector. This is accomplished by individually controlling each light-emitting element of a linear array of light elements. Calibration of the array is accomplished by sequentially illuminating each optical element of the source and building an array of normalized detected data. The matrix is then inverted and multiplied by a linear array of ones to generate the calibration data. The calibration data are then used to program a simple logic device that allows accurate digital control of the intensity of each individual light element.

Abstract: Data integrity checking methods utilize a cumulative hash function. A sequence of data blocks and a corresponding sequence of hashes are stored on a medium. Each hash in the sequence of hashes corresponds to a data block in the sequence of data blocks. A particular hash corresponding to a particular data block is determined as a function of the particular data block and at least one previous hash corresponding to a previous data block in the sequence of data blocks.

Abstract: A system and method of storing data using write once read many (WORM) protection including using a hardware storage device to write data to a medium are provided. The method further includes establishing a write once read many (WORM) module external to the hardware storage device. Data blocks are received at the module, block numbers are specified with the module, and data is output from the module to write to the storage medium at specified block numbers. The last specified block number or all specified block numbers depending on the type of media access are stored so that the external WORM module prevents future writing of data to these specified or already used block numbers.

Abstract: A trusted high stability time source for use with a digital time stamping service and a trusted external time source includes a private time source, a published time source, at least one power supply, and control logic. The control logic is programmed to perform a time stamping operation and to perform a published time source update. In performing the published time source update, a reply received from the trusted external time source includes the published time update, and the published time is updated with the published time update if an update condition is satisfied. The update condition is based in part on a time difference between the private time and the published time update.

Abstract: A method and system for providing a secure time reference when storing data to a storage medium using write once read many (WORM) protection are provided. The method includes receiving a message, determining a message digest, appending a published time from a digital time stamping service to the message digest to create a timestamp, and digitally signing the timestamp with a private key of the digital time stamping service. The message, the timestamp, and the digital signature are stored to the medium using write once read many (WORM) protection.

Abstract: Data integrity checking methods utilize a cumulative hash function. A sequence of data blocks and a corresponding sequence of hashes are stored on a medium. Each hash in the sequence of hashes corresponds to a data block in the sequence of data blocks. A particular hash corresponding to a particular data block is determined as a function of the particular data block and at least one previous hash corresponding to a previous data block in the sequence of data blocks.

Abstract: A system and method of storing data using write once read many (WORM) protection including using a hardware storage device to write data to a medium are provided. The method further includes establishing a write once read many (WORM) module external to the hardware storage device. Data blocks are received at the module, block numbers are specified with the module, and data is output from the module to write to the storage medium at specified block numbers. The last specified block number or all specified block numbers depending on the type of media access are stored so that the external WORM module prevents future writing of data to these specified or already used block numbers.

Abstract: An apparatus and system for handling and storing a plurality of data storage discs includes a toroidal configuration of storage locations for the discs, a plurality of disc drives mounted above the storage locations in a generally annular arrangement, a means for moving any disc into and out of each selected drive on demand, and a control means for directing operation of the means for moving the discs and controlling selection of operation of the disc drives. The apparatus also has another plurality of data storage discs in a secondary module comprising another torodial configuration of storage locations for the discs mounted below the first plurality, a means for moving any disc between the two pluralities of storage locations, and a control means for directing the movement of the discs. The apparatus also has a supplies module mounted beneath the secondary module and houses the power supplies and environmental control equipment necessary for the system.

Abstract: A method and apparatus to handle multiple sets of removable media within a storage system. A first set of removable media are mounted on a set of drives. Data is accepted until the first set of removable media is filled. A second set of removable media is mounted on the drives, while the first set of removable media is removed. When the change in removable media is complete, writing of data proceeds on the second set of removable media. Data may be buffered while the change in removable media occurs. Alternatively, two sets of removable media may be mounted at the same time. When the first set of removable media is filled to a selected amount, the second set of removable media may then be used to write the data. A third set of removable media is set up or mounted for use, while the first set of removable media is removed.

Abstract: An apparatus and method for writing and reading data to and from a virtual volume of redundant storage devices is provided. The apparatus and method make use of metadata identifying the number of data storage devices and number of parity storage devices in the virtual volume of redundant storage devices. In addition, other metadata, such as the identity of the data storage devices and parity storage devices may be utilized. The metadata is stored with each block written to each of the storage devices. In the event of a failure of a storage device, the metadata is modified to reflect the failure and the storage device to which the data intended for the failed storage device was written. In this way, if a failure of a storage device is encountered, each block in the virtual volume of redundant storage devices has enough information in the metadata to identify where to find the data that was intended for the failed storage device. Thus, reconstruction of data using parity information is not required.

Abstract: Disclosed is a intelligent light source that is capable of providing a uniform illumination image across the surface of an illuminated object analyzed by an optical detector. This is accomplished by individually controlling each light-emitting element of a linear array of light elements. Calibration of the array is accomplished by sequentially illuminating each optical element of the source and building an array of normalized detected data. The matrix is then inverted and multiplied by a linear array of ones to generate the calibration data. The calibration data are then used to program a simple logic device that allows accurate digital control of the intensity of each individual light element.