Key generation information trees
AssigneeHewlett-Packard Development Company, L.P.
InventorsLiqun Chen, Boris Balacheff, Fraser Dickin, Taciano Perez, Wagston Staehler, Craig Walrath, James M Mann
Life of this patent
Estimating the term…
Abstract
An example non-transitory computer-readable medium includes instructions that, when executed by a processor, cause the processor to receive a request for data. The instructions also cause the processor to determine a region containing the data based on the metadata. The instructions cause the processor to traverse a tree in the metadata to determine key generation information relating a decryption key for the region to a root key.
Claims15
A system, comprising:
- a computer-readable medium comprising a plurality of regions;
- and
- a cryptographic engine communicatively coupled to the computer-readable medium, the cryptographic engine to:
- store a root key;
- retrieve key generation information for one of the plurality of regions from a tree stored on the computer-readable medium;
- generate a decryption key for the one of the plurality of regions based on the root key and the key generation information;
- and
- decrypt data from the one of the plurality of regions using the decryption key.
A method, comprising:
- determining a computing device comprising a computer-readable medium is being booted for a first time;
- generating a system key to encrypt a region of the computer-readable medium containing system data and a user key to encrypt a region of the computer-readable medium containing user data;
- and
- storing information for generating the system key in a first branch of a tree on the computer-readable medium and information for generating the user key in a second branch of the free different from the first branch.
A non-transitory computer-readable medium comprising instructions that, when executed by a processor, cause the processor to:
- receive a request for data;
- determine a region containing the data based on metadata;
- and
- traverse a tree in the metadata to determine key generation information relating a decryption, key for the region to a root key.
Dependencies are inferred from the claim text.