Encrypted data storage device
AssigneeSeagate Technology LLC
InventorJon David Trantham
Life of this patent
Estimating the term…
Abstract
A data storage device has encrypted user data and a media key stored on media, and a root key stored in an electronic circuit. The data storage device has a first connector adapted to receive a user key and a hardware key device connected to a second connector adjacent an installation space. The hardware key device stores a destructible key in non-volatile memory. The hardware key device is mechanically destroyed, thereby rendering the encrypted user data non-decipherable after the destroying.
Claims21
A data storage device, comprising:
- data storage media that stores a media key;
- an encryption/decryption engine that encrypts data written to the data storage media and decrypts encrypted data read from the data storage media as a function of the media key, a root key, a user key and a destructible key;
- a circuit card assembly that connects the encryption/decryption engine to the data storage media, the circuit card assembly comprising the root key, a first connection that receives the user key, and a second connection that receives the destructible key;
- and
- an installation space adjacent the second connection into which a hardware key device that includes nonvolatile memory is in a position where the hardware key device can be removed or destroyed, and where the hardware key device is electrically connected to communicate the destructible key from the nonvolatile memory to the encryption/decryption engine.
A method of protecting a data storage device from in-transit theft, comprising:
- providing the data storage device with a media key stored on media, a root key stored in an electronic circuit, a first connector adapted to receive a user key and a second connector adjacent an installation space adapted to receive a hardware key device;
- providing a hardware key device that comprises non-volatile memory storing a destructible key, the hardware key device being destructible by mechanical attack;
- marking the data storage device with a unique device identifier;
- marking a shipping container with at least one symbol that indicates that an enclosed data storage device is in inoperative condition;
- shipping the data storage device in the shipping container in a first shipment to a customer without the hardware key device installed;
- and
- shipping the hardware key device, marked with the unique device identifier, to the customer in a second shipment that is separate from the first shipment.
A method of protecting data stored on a data storage device, comprising:
- providing a data storage device with encrypted user data and a media key stored on media, a root key stored in an electronic circuit, a first connector adapted to receive a user key and a second connector adjacent an installation space having a hardware key device installed therein, the hardware key device comprising non-volatile memory storing a destructible key;
- and
- mechanically destroying the hardware key device, thereby rendering the encrypted user data non-accessible after the destroying.
A method of providing auditable evidence of the destruction of data on a data storage device comprising:
- destroying or removing a hardware key device;
- and
- photographing the data storage device after the hardware key device has been destroyed or removed.
Dependencies are inferred from the claim text.