Method, system and program product for securing data written to a storage device coupled to a computer system

A computer system for securing data stored therein, said computer system comprising:

• a central processing unit;
• first program instructions to identify a first detachable data control device for controlling access to data written to a storage device within said computer system, wherein said first detachable data control device comprises a first encryption key module for encrypting said data written to said storage device within said computer system, and wherein said first detachable data control device comprises a first decryption key module for decrypting said data written to said storage device within said computer system;
• second program instructions to couple said first detachable data control device to said computer system for enabling access to said data written to said storage device within said computer system, wherein said first detachable data control device comprises a unique symmetric encryption key and a unique symmetric decryption key for encrypting and decrypting said data written to said storage device within said computer system;
• third program instructions to receive a first request from a first user to store data in the storage device within the computer system;
• fourth program instructions to utilize the first detachable data control device to first encrypt data into encrypted data before writing the encrypted data to the storage device within the computer system, wherein all data being written to the storage device is first encrypted before being written to the storage device;
• fifth program instructions to receive a second request from a second user to retrieve the encrypted data by utilizing the first detachable data control device to decrypt the encrypted data into decrypted data, wherein the first detachable data control device controls access to all data on the storage device;
• sixth program instructions to replace said first detachable data control device with a second detachable data control device, wherein a new unique symmetric encryption key is provided by said second detachable data control device for writing new data to said storage device within said computer system, and wherein a new unique symmetric decryption key is provided by said second detachable data control device for decrypting said new data written to said storage device, and wherein said data written with said first detachable data control device to said storage device within said computer system is not accessible with said second detachable data control device, and wherein replacing said first detachable data control device with said second detachable data control device effectively resets the storage device to an unformatted state that allows the storage device to be overwritten with new data;
• and
• seventh program instructions to display the decrypted data to the second user via a user interface;
• and wherein said first, second, third, fourth, fifth, sixth, and seventh program instructions are stored in said computer system for execution by said central processing unit.

A computer readable medium used for securing data written to a computer system, wherein stored on said computer readable medium are:

• first program instructions to identify a first removable data security device for controlling access to data written to a storage device within a computer system, wherein said first removable data security device comprises a first encryption key module coupled for encrypting said data written to said storage device within said computer system, and wherein said first removable data security device comprises a first decryption key module coupled for decrypting said data written to said storage device within said computer system;
• second program instructions to couple said first removable data security device to said computer system for enabling access to said data written to said storage device within said computer system, wherein said first removable data security device comprises a unique symmetric encryption key and a unique symmetric decryption key for encrypting and decrypting said data written to said storage device within said computer system;
• third program instructions to receive a first request from a first user to store data in the storage device within the computer system;
• and
• fourth program instructions to utilize the first removable data security device to first encrypt data into encrypted data before writing the encrypted data to the storage device within the computer system, wherein all data being written to the storage device is first encrypted before being written to the storage device;
• fifth program instructions to receive a second request from a second user to retrieve the encrypted data by utilizing the first removable data security device to decrypt the encrypted data into decrypted data, wherein the first removable data security device controls access to all data on the storage device;
• sixth program instructions to replace said first removable data security device with a second removable data security device, wherein a new unique symmetric encryption key is provided by said second removable data security device for writing new data to said storage device within said computer system, and wherein a new unique symmetric decryption key is provided by said second removable data security device for decrypting said new data written to said storage device, and wherein said data written with said first removable data security device to said storage device within said computer system is not accessible with said second removable data security device, and wherein replacing said first removable data security device with said second removable data security device effectively resets the storage device to an unformatted state that allows the storage device to be overwritten with new data;
• and
• seventh program instructions to display the decrypted data to the second user via a user interface.