Patent ID: 9471805
Filing Date: 2016-10-18
CPC Classification: G06F

Claim Text:
1. A system for selective encryption of data in a data storage drive within a data storage library, comprising: at least one processor device; a user interface through which to receive a user input of one or more encryption policies, the one or more encryption policies being stored in a hardware memory of a library-drive interface, each encryption policy including a level of encryption, one or more cartridge identifiers, each cartridge identifier providing an encryption key representing a data cartridge stored in the library, and each cartridge identifier providing an identification of the encryption key to be used to encrypt data written to media in a data cartridge; at least one hardware processor device configured to: obtain a cartridge identifier of a data cartridge loaded into the storage drive; match the cartridge identifier with an associated encryption policy stored in the storage drive, the matching of the cartridge identifier with the associated encryption policy being performed at the storage drive; and the library-drive interface configured to: transmit a request to a key server for an encryption key in response to matching the cartridge identifier with a corresponding encryption policy; and receive the requested encryption key from the key server; an encryption controller to encrypt data to be written to the loaded data cartridge using the received requested encryption key, where data stored in the data storage library is selectively encrypted; and a memory for storing the one or more encryption policies in an encryption policy table, wherein selecting an encryption policy for the specified data cartridge is performed by the storage drive.