Re: SAVxxx TAPES: undoubtfully identifying NOT-local origin (e.g. jury Court room)

[John Earl <john.earl@xxxxxxxxxxxxxx>]

Antonio,

One could interrogate objects as they are restored and see which of  
those objects were last saved on your originating system and also  
contained the proper time-stamp, and that would give you some degree  
of confidence that the data had not been manipulated.

But if your requirement is to be able to "positively, strictly,  
identify that tape as being NOT-one-of-ours-for-sure", then I think  
you must encrypt, hash, and/or sign the data as it leaves the source  
system.  There are a number of options for doing encryption today, and  
the technology is getting better and more usable every day.  Any other  
solution can increase the likelihood that you can tell when data is  
encrypted, but none other would make me absolutely positive.

jte




On Apr 14, 2010, at 9:05 AM, Antonio Fernandez-Vicenti wrote:

> Assume you have several iSeries systems.
> Some has stolen one of your tapes with LIBxxx objects (files, etc).
> Restores it to a different system. Modifies some / much of the data,
> then does a SAVLIB.
>
> If the case arrives, ... Can you positively, strictly, identify that
> tape as being NOT-one-of-ours-for-sure?
>
> e.g., by means of dumping control blocks at the beginnig of the  
> tape, or
> any other similar ways.
> I guess System's SYSNAME or SerialNo. are not kept in the tape's data
> control blocks.
> And, even if it is, can you strictly prove "it-is-NOT-our-tape"?
>
> TIA
>
> --
> Antonio Fernández-Vicenti
> afvaiv@xxxxxxxxxxxxxx
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L)  
> mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.

--
John Earl
President and CEO
Patrick Townsend Security Solutions
"The Encryption Company"

Olympia, WA | www.patownsend.com
Office: 360-357-8971 Ext 118