Back to results
US 9,871,787 B2Granted
Authentication processing for a plurality of self-encrypting storage devices
AssigneeAssured Information Security, Inc.
InventorMaurice Gale
Life of this patent
Estimating the term…
Abstract
Authentication processing for a plurality of self-encrypting storage devices, e.g. SEDs) of a computer system is provided. The authentication processing for the SEDs includes obtaining authentication information for one SED of the plurality of SEDs, performing authentication processing for the one SED based on the obtained authentication information for the one SED; and based on the authentication processing for the one SED, performing authentication processing for each additional SED of one or more additional SEDs of the plurality of SEDs. A pre-boot configuration environment (PBA) to facilitate the authentication processing, and methods for installing the PBA are provided.
Claims18
A method comprising:
- performing authentication processing for a plurality of self-encrypting storage devices of a computer system to unlock the plurality of self-encrypting storage devices using a plurality of different unlock keys, the authentication processing for the plurality of self-encrypting storage devices comprising:
- obtaining authentication information for one self-encrypting storage device of the plurality of self-encrypting storage devices;
- performing authentication processing for the one self-encrypting storage device based on the obtained authentication information for the one self-encrypting storage device;
- and
- based on the authentication processing for the one self-encrypting storage device, performing authentication processing for each additional self-encrypting storage device of one or more additional self-encrypting storage devices of the plurality of self-encrypting storage devices, wherein the authentication processing for the plurality of self-encrypting storage devices sequentially unlocks the plurality of self-encrypting storage devices using the plurality of different unlock keys, wherein an unlock key corresponding to a sequentially-subsequent self-encrypting storage device is obtained based on unlocking a sequentially-previous self-encrypting storage device and obtaining, from the sequentially-previous self-encrypting storage device, the unlock key corresponding to the sequentially-subsequent self-encrypting storage device.
2 more elements
A computer program product comprising:
- a non-transitory computer-readable storage medium comprising program instructions for execution by a processor to perform a method comprising:
- performing authentication processing for a plurality of self-encrypting storage devices of a computer system to unlock the plurality of self-encrypting storage devices using a plurality of different unlock keys, the authentication processing for the plurality of self-encrypting storage devices comprising:
- obtaining authentication information for one self-encrypting storage device of the plurality of self-encrypting storage devices;
- performing authentication processing for the one self-encrypting storage device based on the obtained authentication information for the one self-encrypting storage device;
- and
- based on the authentication processing for the one self-encrypting storage device, performing authentication processing for each additional self-encrypting storage device of one or more additional self-encrypting storage devices of the plurality of self-encrypting storage devices, wherein the authentication processing for the plurality of self-encrypting storage devices sequentially unlocks the plurality of self-encrypting storage devices using the plurality of different unlock keys, wherein an unlock key corresponding to a sequentially-subsequent self-encrypting storage device is obtained based on unlocking a sequentially-previous self-encrypting storage device and obtaining, from the sequentially-previous self-encrypting storage device, the unlock key corresponding to the sequentially-subsequent self-encrypting storage device.
3 more elements
A computer system configured to perform a method comprising:
- performing authentication processing for a plurality of self-encrypting storage devices of a computer system to unlock the plurality of self-encrypting storage devices using a plurality of different unlock keys, the authentication processing for the plurality of self-encrypting storage devices comprising:
- obtaining authentication information for one self-encrypting storage device of the plurality of self-encrypting storage devices;
- performing authentication processing for the one self-encrypting storage device based on the obtained authentication information for the one self-encrypting storage device;
- and
- based on the authentication processing for the one self-encrypting storage device, performing authentication processing for each additional self-encrypting storage device of one or more additional self-encrypting storage devices of the plurality of self-encrypting storage devices, wherein the authentication processing for the plurality of self-encrypting storage devices sequentially unlocks the plurality of self-encrypting storage devices using the plurality of different unlock keys, wherein an unlock key corresponding to a sequentially-subsequent self-encrypting storage device is obtained based on unlocking a sequentially-previous self-encrypting storage device and obtaining, from the sequentially-previous self-encrypting storage device, the unlock key corresponding to the sequentially-subsequent self-encrypting storage device.
2 more elements
Dependencies are inferred from the claim text.