System and methods for full disk encryption with a check for compatibility of the boot disk
AssigneeKasepersky Lab ZAO
InventorEvgeny A. Yakovlev
Life of this patent
Estimating the term…
Abstract
Disclosed are systems, methods and computer program products for full disk encryption of a boot disk of a computer. One example method for full disk encryption of a boot disk of a computer includes performing one or more pre-boot compatibility tests on the boot disk of the computer; determining one or more encryption policies applicable to a pre-boot execution stage of the computer; comparing results of the pre-boot compatibility tests with the encryption policies; determining whether to apply a full disk encryption to the boot disk based on an outcome of comparing the results of the pre-boot compatibility tests with the encryption policies; and when it is determined to apply the full disk encryption, applying the full disk encryption to the boot disk.
Claims18
A method of full disk encryption of a boot disk of a computer, comprising:
- performing by a processor, one or more pre-boot compatibility tests on the boot disk of the computer, comprising determining whether a test booting has been performed;
- upon determining that the test booting has not been performed, performing the one or more pre-boot compatibility tests to boot an operating system of the computer, and indicating a successful booting of the operating system;
- upon determining that the test booting has been successfully performed, attempting to boot the operating system of the computer or performing the one or more pre-boot compatibility tests again;
- upon determining that the test booting has not been successfully performed, restoring a process of ordinary booting of the operating system and performing an ordinary booting of the operating system;
- determining one or more encryption policies applicable to a pre-boot execution stage of the computer;
- comparing results of the pre-boot compatibility tests with the encryption policies;
- determining whether to apply a full disk encryption to the boot disk based on an outcome of comparing the results of the pre-boot compatibility tests with the encryption policies;
- and
- when it is determined to apply the full disk encryption, applying the full disk encryption to the boot disk.
A system of full disk encryption of a boot disk of a computer, comprising:
- a processor configured to:
- perform one or more pre-boot compatibility tests on the boot disk of the computer, comprising determining whether a test booting has been performed;
- upon determining that the test booting has not been performed, perform the one or more pre-boot compatibility tests to boot an operating system of the computer, and indicate a successful booting of the operating system;
- upon determining that the test booting has been successfully performed, attempt to boot the operating system of the computer or perform the one or more pre-boot compatibility tests again;
- upon determining that the test booting has not been successfully performed, restore a process of ordinary booting of the operating system and perform an ordinary booting of the operating system;
- determine one or more encryption policies applicable to a pre-boot execution stage of the computer;
- compare results of the pre-boot compatibility tests with the encryption policies;
- determine whether to apply a full disk encryption to the boot disk based on an outcome of comparing the results of the pre-boot compatibility tests with the encryption policies;
- and
- when it is determined to apply the full disk encryption, apply the full disk encryption to the boot disk.
A computer program product stored on a non-transitory computer-readable storage medium, the computer program product comprising computer-executable instructions for full disk encryption of a boot disk of a computer, including instructions for:
- performing one or more pre-boot compatibility tests on the boot disk of the computer, comprising determining whether a test booting has been performed;
- upon determining that the test booting has not been performed, performing the one or more pre-boot compatibility tests to boot an operating system of the computer, and indicating a successful booting of the operating system;
- upon determining that the test booting has been successfully performed, attempting to boot the operating system of the computer or performing the one or more pre-boot compatibility tests again;
- upon determining that the test booting has not been successfully performed, restoring a process of ordinary booting of the operating system and performing an ordinary booting of the operating system;
- determining one or more encryption policies applicable to a pre-boot execution stage of the computer;
- comparing results of the pre-boot compatibility tests with the encryption policies;
- determining whether to apply a full disk encryption to the boot disk based on an outcome of comparing the results of the pre-boot compatibility tests with the encryption policies;
- and
- when it is determined to apply the full disk encryption, applying the full disk encryption to the boot disk.
Dependencies are inferred from the claim text.