Storage device controlled access

A system for controlling access to a storage device, wherein data stored on the storage device is capable of being accessed in accordance with a layered structure comprising a plurality of layers, the system comprising:

• a processing portion for:
• associating a first key and a second key with a first layer and a second layer, respectively, of the plurality of layers of the layered structure;
• generating a final key indicative of a combination of at least the first and second keys associated with the first and second layers;
• and
• controlling access to the storage device in accordance with a keyed transformation function and the final key;
• associating a key combining function with each layer having an associated key;
• and
• in accordance with a predetermined sequence:
• for each associated key combining function having a next key combining function in the sequence, providing a respective key combining function output as an input to a next key combining function in the sequence;
• and
• for a final key combining function indicative of an associated key combining function not having a next key combining function in the sequence, providing the final key, indicative of an output of the final key combining function, to the keyed transformation function;
• transforming with the keyed transformation function in accordance with the final key, data for storage on the storage device;
• and
• transforming with the keyed transformation function in accordance with the final key, data received from the storage device;
• and
• a memory portion for storing each associated respective key;
• and
• an input/output portion for:
• accessing the storage device;
• providing transformed data to the storage device;
• and
• receiving data from the storage device.

A computer-readable storage medium, the computer-readable storage medium not being a transient signal, the computer-readable storage medium having computer-executable instructions stored thereon for controlling access to a storage device, wherein data stored on the storage device is capable of being accessed in accordance with a layered structure comprising at least one layer, the instructions for performing the acts of:

• associating a respective key with at least one of the at least one layer of the layered structure;
• generating a final key indicative of a combination of the at least one respective key associated with the at least one layer;
• associating a key combining function with each one of the at least one layer having a respective associated key;
• in accordance with a predetermined sequence:
• for each associated key combining function having a next key combining function in the sequence, providing a respective key combining function output as an input to a next key combining function in the sequence;
• and
• for a final key combining function indicative of an associated key combining function not having a next key combining function in the sequence, providing the final key, indicative of an output of the final key combining function, to the keyed transformation function;
• and
• performing one of:
• providing to the storage device, data transformed with a keyed transformation function in accordance with the final key;
• and
• transforming, with the keyed transformation function in accordance with the final key, data received from the storage device.