US 2003/0126434 A1 · File security system using a security class and method for managing an encryption key

Abstract

A file security system uses a security class set by an access control module. The file security system includes a disk, a kernel memory and an encryption file system. The disk includes a key file in which an encryption key corresponding to the security class is stored and a file encoded by the encryption key. The encryption key stored in the disk is loaded into the kernel memory when the file security system starts operating. The encryption file system extracts an encryption key corresponding to a security class of a file that a user intends to read or store; decodes or encodes the file by using the extracted encryption key; and then provides the decoded file to the user or stores the encoded file in the disk.

Claims19

Dependent claims

A file security system using a security class set by an access control module, comprising:

a disk including a key file in which an encryption key corresponding to the security class is stored and a file encoded by using the encryption key;
a kernel memory into which the encryption key stored in the disk is loaded when the file security system starts operating;
and
an encryption file system for extracting from the kernel memory an encryption key corresponding to a security class of a file that a user intends to read or store;
decoding or encoding the file by using the extracted encryption key;
and then transmitting the decoded file to the user or storing the encoded file in the disk.

3 more elements

A method for managing an encryption key in a file security system including an access control module for defining a security class and a disk having therein both an encryption key corresponding to the security class and a file encoded by the encryption key, the method comprising the steps of:

(a) generating a key ID file having a predetermined key ID and generating an encryption key corresponding to the security class specified in the key ID in response to an encryption key generation request from a security manager;
(b) generating a round key corresponding to the encryption key stored in the disk when the file security system starts operating and loading the generated round key into a kernel memory of the file security system;
and
(c) extracting from the kernel memory an encryption key corresponding to a security class of a file that a user wants to read or store;
decoding or encoding the file by using the extracted encryption key;
and providing the decoded file to the user or storing the encoded file in the disk.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application

10/232,748Filed 3 Sep 2002

Priority

KR 2001-8575727 Dec 2001

Published

3 Jul 2003

Term ends

Not estimatedThe source records don’t support an estimate.

Classification4 codes

G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 2221/2107
Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for…: file…
G06F 2221/2113
Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for…:…
G06F
Computing and data processing

File security system using a security class and method for managing an encryption key

Life of this patent

File security system using a security class and method for managing an encryption key

Life of this patent

Abstract

Claims19