System and method for securing data within a storage system

Abstract

According to the present invention, there is provided a system for securing data with a storage system. The system includes at least one storage device. In addition, the system includes a security mechanism for recognizing an attempt to insert or remove the storage device. Moreover, the system includes a management unit to control the insertion and removal of the storage device.

1 . A system for securing data within a storage system, comprising: 
 at least one storage device; 
 a security mechanism for recognizing an attempt to insert of remove the storage device; and  
 a management unit to control the insertion and removal of the storage device.  
   
   
   
       2 . The system of  claim 1  wherein the management unit initializes the storage device after it has been inserted in the storage system, wherein the inserted storage device is not accessible for reading or writing until it has been initialized.  
   
   
       3 . The system of  claim 1  wherein the storage system contains slots for housing at least one storage device.  
   
   
       4 . The system of  claim 3  wherein the storage device is considered to be inserted into one of the slots contained in the storage system if the storage device can communicate with at least one other storage device in the storage system.  
   
   
       5 . The system of  claim 3  wherein each of the slots contains a locking mechanism that can be moved into position to prevent the removal of the storage device after it has been inserted into one of the slots.  
   
   
       6 . The system of  claim 1  wherein the management unit determines whether there is a copy of all data on the storage device within the storage system, and allows the storage device to be removed only if a copy of the data exists within the storage system and after the storage device has been reinitialized.  
   
   
       7 . The system of  claim 6  further comprises allowing the storage device to be removed from the storage system only if the resulting degree of fault tolerance in the storage system remains the same.  
   
   
       8 . The system of  claim 6  further includes a failure and prediction unit, wherein the failure and prediction unit recognizes the impact on the storage system upon removal of the storage device and prevents the removal of the data storage device from the storage system if it determines that the removal would have a negative impact on the storage system.  
   
   
       9 . A computer program product comprising a computer usable medium including a computer readable program, wherein the computer readable program when executed on a computer causes the computer to: 
 recognize an attempt to insert or remove a storage device from a computer system; and    to control the insertion and removal of the storage device from the computer system.    
   
   
       10 . The computer program product of  claim 9  wherein controlling the insertion of the storage device comprises initializing the storage device before making it available for reading or writing.  
   
   
       11 . The computer program product of  claim 9  wherein the storage system contains slots for housing at least one storage device.  
   
   
       12 . The computer program product of  claim 11  wherein the storage device is considered to be inserted into one of the slots contained in the storage system if the storage device can communicate with at least one other storage device in the storage system.  
   
   
       13 . The computer program product of  claim 11  wherein each of the slots contains a locking mechanism that can be moved into position to prevent the removal of the storage device after it has been inserted into one of the slots.  
   
   
       14 . The computer program product of  claim 13  wherein the locking mechanism is automatically engaged upon the insertion of the storage device.  
   
   
       15 . The computer program product of  claim 13  wherein the storage device is available for reading and storing data only after it has been locked into the slot and it has been initialized.  
   
   
       16 . The computer program product of  claim 9  wherein the management unit determines whether there is a copy of all data on the storage device within the storage system, and allows the storage device to be removed only if a copy of the data exists within the storage system.  
   
   
       17 . The computer program product of  claim 16  further comprises reinitializing the storage device before allowing the storage device to be removed from the storage system.  
   
   
       18 . The computer program product of  claim 16  further comprises allowing the storage device to be removed from the storage system only if the resulting degree of fault tolerance in the storage system remains the same.  
   
   
       19 . The computer program product of  claim 16  further includes a failure and prediction unit, wherein the failure and prediction unit recognizes the impact of on the storage system upon removal of the storage device, and prevents the removal of the data storage device from the storage system if it determines that the removal would have a negative impact on the storage system.  
   
   
       20 . A method of deploying a data security system within a storage system, comprising: 
 identifying all storage devices within a storage system;    integrating a security mechanism into the storage system for recognizing an attempt to insert or remove the identified storage devices; and    integrating a management unit into the storage system to control the insertion and removal of the identified storage devices.