US 2021/0173953 A1 · UNLOCKING A DATA STORAGE DEVICE

Abstract

Disclosed herein is a data storage device comprising a data path and an access controller. The data path comprises a data port configured to transmit data between a host computer and the data storage device. The data storage device is configured to register with the host computer as a block data storage device. A non-volatile storage medium stores encrypted user content data and a cryptography engine is connected between the data port and the storage medium and uses a cryptographic key to decrypt the encrypted user content data. The access controller generates a challenge for an authorized device; sends the challenge to the authorized device; receives a response to the challenge from the authorized device over the communication channel; calculates the cryptographic key based on the response; and provides the cryptographic key to the cryptography engine to decrypt the encrypted user content data stored on the storage medium.

Claims21

Dependent claims

A data storage device comprising a data path and an access controller, wherein:

the data path comprises:
a data port configured to transmit data between a host computer system and the data storage device, wherein the data storage device is configured to register with the host computer system as a block data storage device;
a non-volatile storage medium configured to store encrypted user content data;
and
a cryptography engine connected between the data port and the storage medium and configured to use a cryptographic key to decrypt the encrypted user content data stored on the storage medium in response to a request from the host computer system;
and
the access controller is configured to:
generate a challenge for an authorized device;
send the challenge to the authorized device over a communication channel that is different from the data path;
receive a response to the challenge from the authorized device over the communication channel;
calculate the cryptographic key based at least partly on the response;
and
provide the cryptographic key to the cryptography engine to decrypt the encrypted user content data stored on the storage medium of the data storage device.

10 more elements

Dependencies are inferred from the claim text.

Unlocking a data storage device

Life of this patent

Unlocking a data storage device

Life of this patent

Abstract

Claims21