# US 8,751,827 B1 · Apparatus for controlling embedded security on a storage platform > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,751,827 B1 - Document ID: US8751827B1 - Status: Granted - Kind: B1 - Application number: 12/823,636 - Filed: 2010-06-25 - Granted: 2014-06-10 - Earliest claimed: 2010-06-25 - Assignees: EMC Corporation - Applicants: William M. Duane; Robert W. Griffin; John S. Harwood; Gregory W. Lazar; Thomas E. Linnell - Inventors: William M. Duane; Robert W. Griffin; John S. Harwood; Gregory W. Lazar; Thomas E. Linnell - Web page: https://patentgrep.com/patent/US8751827B1 ## CPC - G06F 3/1204: {resulting in reduced user or operator actions, e.g. presetting, automatic actions, using hardware token storing data} - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - G06F 21/60: Protecting data - G06F 21/6209: {to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself} - G06F 21/79: in semiconductor storage media, e.g. directly-addressable memories - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 2209/12: Details relating to cryptographic hardware or logic circuitry - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method of securely operating a computerized system includes forming a connection to a user-removable physical security device (PSD) which is uniquely paired with the computerized system and which stories cryptographically secured data required for performing a protected function on the computerized system. The PSD may be realized as a USB or similar peripheral device containing security-related data and potentially security processing capability as well. The protected function could be decrypting of encrypted data encryption keys used to encrypt/decrypt user data for example. A user who has an established association with the PSD (e.g. by some preceding registration process) is authenticated, resulting in activation of the PSD on the computerized system. Upon such activation of the PSD, the computerized system engages in a security operation using the cryptographically secured data from the PSD to enable the protected function to be performed under control of the user on the computerized system. ## Claims ### Claim 1 A method of securely operating a computerized system, comprising: forming a connection to a user-removable physical security device being uniquely paired with the computerized system and storing cryptographically secured data required for performing a protected function on the computerized system, the connection employing a first input/output interface of the computerized system; authenticating a user having an established association with the physical security device, the authenticating resulting in activation of the physical security device on the computerized system; and only upon the activation of the physical security device on the computerized system, engaging in a security operation using the cryptographically secured data on the physical security device to enable the protected function to be performed under control of the user on the computerized system, the computerized system being a storage array of a storage system and the protected function being encrypted data storage operations provided by the storage array using external storage devices accessed via a second input/output interface of the storage array; the storage array includes a security structure which contains keys and data needed by the storage array to protect and unprotect user data during the encrypted data storage operations, the security structure residing in a first memory of the storage array and being encrypted wholly or in part; the cryptographically secured data being stored in a second memory of the physical security device and including one or more encryption keys needed to decrypt the security structure to permit use of a resulting cleartext security structure for use in protecting and unprotecting the user data; and the security operation includes obtaining the encryption keys from the second memory of the physical security device and using the encryption keys to decrypt the security structure to obtain the keys and data for use in the encrypted data storage operations. ### Claim 2 (depends on 1) A method according to claim 1, wherein the cryptographically secured data includes data expressing a pairing of the physical security device, and wherein the security operation includes performing a function on the cryptographically secured data which expresses a pairing of the computerized system, and wherein the protected function is enabled only if the security operation provides a result confirming that the pairing of the physical security device matches the pairing of the computerized system. ### Claim 3 (depends on 1) A method according to claim 1, wherein the unique pairing of the computerized system and the physical security device is established implicitly by successful operation of one or more functions involving both the physical security device and the computerized system. ### Claim 4 (depends on 3) A method of claim 3, wherein the one or more functions includes a cryptographic function. ### Claim 5 (depends on 1) A method according to claim 1, wherein the protected function includes enabling a normal operating mode in which the computerized system performs data processing functions for external requestors, and wherein the protected function includes enabling the normal operating mode. ### Claim 6 (depends on 1) A method according to claim 1, wherein the protected function includes periodically performing a re-enabling operation in which continued normal operation of the computerized system is re-enabled only if the physical security device is still activated on the computerized system, and further including ceasing the normal operation of the computerized system in the event that the physical security device is not present on the computerized system at any time of performing the re-enabling operation. ### Claim 7 (depends on 1) A method according to claim 1, wherein the unique pairing of the physical security device with the computerized system is made through use of a randomly generated globally unique stable system value. ### Claim 8 (depends on 1) A method according to claim 1, wherein the physical security device stores credentials for the user which are utilized in the authentication/authorization of the user. ### Claim 9 (depends on 1) A method according to claim 1, wherein the physical security device includes a processor operative to perform functions of the security operation without exposing sensitive cryptographic data stored on the physical security device, and wherein the method further includes interacting with the processor to initiate the performing of the functions by the processor. ### Claim 10 (depends on 1) A method according to claim 1, wherein the physical security device includes extended memory storing one or more of (1) software programs for use by the computerized system, and (2) data usable for configuring and/or diagnosing the computerized system, and wherein the method further includes uploading the software programs from the physical security device and executing the uploaded software programs, and/or performing a configuration or diagnostic process in which the data is transferred between the physical security device and the computerized system. ### Claim 11 (depends on 10) A method according to claim 10, wherein the software programs include programs selected from software updates, system tools, and virtual machines. ### Claim 12 (depends on 1) A method according to claim 1, wherein the physical security device includes a biometric sensor operative to receive user-identifying physical stimulus and obtain corresponding user-identifying data, and wherein authenticating includes using the user-identifying data to verify the identity of the user. ### Claim 13 (depends on 1) A method according to claim 1, wherein the physical security device includes user interface components enabling a direct exchange of data between the physical security device and the user. ### Claim 14 (depends on 13) A method according to claim 13, wherein the user interface components include a display and/or a keypad. ### Claim 15 (depends on 13) A method according to claim 13, wherein the physical security device is operative to perform a diagnostic for self checking and to report status from the diagnostic to the user via one or more of the user interface components. ### Claim 16 (depends on 1) A method according to claim 1, wherein the physical security device includes a one-time-password (OTP) token usable for authenticating the user to a remote system in which the user has access rights. ### Claim 17 (depends on 16) A method according to claim 16, wherein the method further includes engaging in an OTP-based authentication procedure with the remote system using the OTP token to permit the user to exercise the access rights on the remote system. ### Claim 18 (depends on 16) A method according to claim 16, wherein the physical security device includes mechanical and electrical interface components of a selected one of a Universal Serial Bus (USB) device, an Ethernet device, and a wireless device. ### Claim 19 (depends on 1) A method according to claim 1, wherein authenticating the user includes testing that the user knows predetermined information required to be presented to the computerized system for authenticating the user, the testing including receiving user-provided information and comparing it to the predetermined information separately available to the computerized system. ### Claim 20 (depends on 19) A method according to claim 19, wherein the information includes a password or personal identifying number, and wherein the testing includes receiving a user-provided password or personal identifying number and comparing it to the predetermined password or personal identifying number. ### Claim 21 (depends on 20) A method according to claim 20, wherein the predetermined password or personal identifying number is stored in the first memory, and wherein the testing includes retrieving the predetermined password or personal identifying number from the first memory for use in the comparing. ### Claim 22 (depends on 20) A method according to claim 20, wherein the predetermined password or personal identifying number is stored in the second memory of the physical security device, and wherein the testing includes retrieving the predetermined password or personal identifying number from the second memory of the physical security device for use in the comparing. ### Claim 23 (depends on 19) A method according to claim 19, wherein the predetermined information is first information stored on and retrieved from the physical security device as part of the comparing, and the cryptographically secured data is second information released to the computerized system for the security operation upon completion of the authenticating using the first information as retrieved. ### Claim 24 (depends on 1) A method according to claim 1, wherein the second interface is a FibreChannel interface connected to a FibreChannel storage-oriented interconnection bus. ### Claim 25 (depends on 1) A method according to claim 1, wherein the second interface connects the storage array to a storage area network. ### Claim 26 A computerized system, comprising: a processor; a first memory; interface circuitry providing first and second input/output interfaces; and one or more system buses coupling the processor, first memory and interface circuitry together, wherein the processor is operative to execute instructions from the first memory to perform a method of securely operating a computerized system, including: forming a connection, via the first input/output interface of the interface circuitry, to a user-removable physical security device being uniquely paired with the computerized system and storing cryptographically secured data required for performing a protected function on the computerized system; authenticating a user having an established association with the physical security device, the authenticating resulting in activation of the physical security device on the computerized system; and only upon the activation of the physical security device on the computerized system, engaging in a security operation using the cryptographically secured data on the physical security device to enable the protected function to be performed under control of the user on the computerized system, the computerized system being a storage array of a storage system and the protected function being encrypted data storage operations provided by the storage array using external storage devices accessed via the second input/output interface of the interface circuitry; the storage array including a security structure which contains keys and data needed by the storage array to protect and unprotect user data during the encrypted data storage operations, the security structure residing in the first memory and being encrypted wholly or in part; the cryptographically secured data being stored in a second memory of the physical security device and including one or more encryption keys needed to decrypt the security structure to permit use of a resulting cleartext security structure for use in protecting and unprotecting the user data; and the security operation including obtaining the encryption keys from the second memory of the physical security device and using the encryption keys to decrypt the security structure to obtain the keys and data for use in the encrypted data storage operations. ### Claim 27 (depends on 26) A computerized system according to claim 26, wherein the cryptographically secured data includes data expressing a pairing of the physical security device, and wherein the security operation includes performing a function on the cryptographically secured data which expresses a pairing of the computerized system, and wherein the protected function is enabled only if the security operation provides a result confirming that the pairing of the physical security device matches the pairing of the computerized system. ### Claim 28 (depends on 26) A computerized system according to claim 26, wherein the protected function includes enabling a normal operating mode in which the computerized system performs data processing functions for external requestors, and wherein the protected function includes enabling the normal operating mode. ### Claim 29 (depends on 26) A computerized system according to claim 26, wherein the second interface is a FibreChannel interface connected to a FibreChannel storage-oriented interconnection bus. ### Claim 30 (depends on 26) A computerized system according to claim 26, wherein the second interface connects the storage array to a storage area network.