Methods of decrypting disk images, and decryption-enabling devices
AssigneeBAE SYSTEMS plc
InventorRoss James Bevington
Life of this patent
Estimating the term…
Abstract
A decryption-enabling device for decrypting a disk image of a computer device, comprising a processor, memory and a hardware connector for connecting to the hardware interface connection of the computer device. The decryption-enabling device is arranged to create using the processor a copy of the random-access memory of the computer device, analyse using the processor the copy of the random-access memory to extract one or more potential decryption keys, and store the one or more potential decryption keys in the memory.
Claims21
A method of decrypting a disk image of a computer device, the method comprising:
- receiving, by a decryption-enabling device connected to a hardware interface connection of the computer device, a copy of random-access memory of the computer device, wherein the copy of random-access memory is received from the computer device when the computer device is in a locked state;
- analyzing the copy of the random-access memory to extract one or more potential decryption keys;
- and
- decrypting the disk image of the computer device using at least one of the one or more potential decryption keys.
The method of 7, wherein of the disk image is copied by the decryption-enabling device on a hard disk of the decryption-enabling device.
A decryption-enabling device for decrypting a disk image of a computer device, the decryption-enabling device comprising:
- a processor;
- a memory;
- and
- a hardware connector for connecting to a hardware interface connection of the computer device;
- wherein the decryption-enabling device is arranged to
- transmit, to the computer device and while the computer device is in a locked state, a memory access request, wherein the memory access request is transmitted without unlocking the computer device,
- receive, in response to the memory access request, a copy of random-access memory of the computer device,
- analyze using the processor the copy of the random-access memory to extract one or more potential decryption keys, and
- store the one or more potential decryption keys in the memory.
Dependencies are inferred from the claim text.