Crypto-pointers for secure data storage

A secure memory structure of a storage device comprising:

• a root set of pointers that provide at least one entrance point into the memory structure of the storage device,
• wherein the root set of pointers includes a first crypto-pointer having a first encryption key and a first address corresponding to a first memory cell in the memory structure, and a second crypto-pointer having a second encryption key and a second address corresponding to a second memory cell in the memory structure,
• wherein first data stored at the second address is encrypted with the second encryption key, and
• wherein second data and the second crypto-pointer are both stored at the first address and are encrypted with the first encryption key.

A method of accessing encrypted data in a secure heap data structure comprising:

• maintaining, by a computer system, a root set of pointers in an unencrypted form outside of the secure heap;
• within the root set of pointers, providing, by the computer system, a first crypto-pointer associated with a first memory cell in the secure heap data structure, the first crypto pointer having a first address and a first key;
• accessing, by the computer system, the encrypted data stored at the first memory cell by decrypting the data using the first key, and wherein the decrypted data includes a second crypto-pointer associated with a second memory cell in the secure heap data structure, the second crypto-pointer having a second address and a second key;
• and
• accessing the encrypted data stored at the second memory cell by decrypting the data using the second key.