Systems and methods for controlling access to data on a computer with a secure boot process

• US 20060161790A1
• Filed: 01/14/2005
• Published: 07/20/2006
• Est. Priority Date: 01/14/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Schwartz, Jonathan, England, Paul, Ray, Kenneth D., Thom, Stefan, Hunter, Jamie, Schwartz, James Anthony Jr., Humphries, Russell
• Granted Patent: US 7,565,553 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00

Abstract

Systems and methods for controlling access to data on a computer with a secure boot process can provide a highly efficient mechanism for preventing future access to encrypted digital resources. This may be advantageous in a range of scenarios, for example where a computer is sold and assurance is desired that no stray private data remains on the hard disk. Data resources, for example all data associated with one or more particular hard disk partitions, may be encrypted. The decryption key may be available through a secure boot process. By erasing, altering, or otherwise disabling a secret, such as a decryption key or a process that obtains a decryption key, the data formerly accessible using such secret becomes inaccessible.

Claims

1. A computer comprising a mechanism for disabling access to at least one secret for decrypting encrypted data stored on a computer readable medium, comprising:

means for securely booting the computer comprising means for authenticating at least one boot component, wherein at least one secret may be accessed if said at least one boot component is authentic;

means for decrypting the encrypted data using said at least one secret;

means for disabling said at least one secret.

2. The computer of claim 1, wherein said means for securely booting a computer comprises a hardware security module (HSM).

3. The computer of claim 1, wherein said encrypted data stored on a computer readable medium is a subset of the data that may be accessed by the computer.

4. The computer of claim 1, wherein the at least one secret is a secret needed by the means for securely booting the computer to successfully boot the computer.

5. The computer of claim 1, wherein the means for disabling said at least one secret comprises means for erasing said at least one secret from a computer readable medium.

6. The computer of claim 1, wherein the means for disabling said at least one secret comprises means for altering a portion of said means for securely booting the computer.

7. A computer readable medium bearing instructions for disabling access to at least one secret for decrypting encrypted data stored on a computer readable medium, comprising:

instructions for securely booting the computer comprising instructions for authenticating at least one boot component, wherein at least one secret may be accessed if said at least one boot component is authentic;

instructions for decrypting the encrypted data using said at least one secret;

instructions for disabling said at least one secret.

8. The computer readable medium of claim 7, wherein said instructions for securely booting a computer comprise instructions for retrieving the at least one secret from a hardware security module (HSM).

9. The computer readable medium of claim 7, wherein said encrypted data stored on a computer readable medium is a subset of the data that may be accessed by the computer.

10. The computer readable medium of claim 7, wherein the at least one secret is a secret needed by the instructions for securely booting the computer to successfully boot the computer.

11. The computer readable medium of claim 7, wherein the instructions for disabling said at least one secret comprise instructions for erasing said at least one secret from a computer readable medium.

12. The computer readable medium of claim 7, wherein the instructions for disabling said at least one secret comprise instructions for altering a portion of said instructions for securely booting the computer.

13. A method for disabling access to at least one secret for decrypting encrypted data stored on a computer readable medium, comprising:

securely booting the computer, wherein said securely booting comprises authenticating at least one boot component, and wherein at least one secret may be accessed if said at least one boot component is authentic;

decrypting at least a portion of the encrypted data using said at least one secret, wherein said at least a portion of the encrypted data contains a process for locating and disabling said at least one secret;

disabling said at least one secret.

14. The method of claim 13, wherein said authenticating comprises validating a measurement of at least one boot component using a hardware security module (HSM).

15. The method of claim 13, wherein said encrypted data stored on a computer readable medium is a subset of the data that may be accessed by the computer.

16. The method of claim 13, wherein the at least one secret is a secret needed to successfully boot the computer.

17. The method of claim 13, wherein disabling said at least one secret comprises erasing said at least one secret from a computer readable medium.

18. The method of claim 13, wherein disabling said at least one secret comprises altering a portion of a mechanism for securely booting the computer.

19. A computer readable medium bearing instructions for disabling access to at least one secret for decrypting encrypted data stored on a computer readable medium, comprising:

instructions for encrypting data;

instructions for sealing a secret within a hardware security module, wherein said secret allows decryption of the data;

instructions for disabling the secret that is sealed within the hardware security module (HSM).

20. The computer readable medium of claim 19, wherein said HSM comprises a trusted platform module (TPM).