Recovery of Data Access for a Locked Secure Storage Device

• US 20070300052A1
• Filed: 06/19/2007
• Published: 12/27/2007
• Est. Priority Date: 07/14/2005
• Status: Active Grant

• Current Assignee: David Jevans
• Original Assignee: Imation Corporation (Glassbridge Enterprises, Inc.)
• Inventors: Jevans, David
• Granted Patent: US 8,335,920 B2
• Time in Patent Office: Days
• US Class Current: 713/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers

Abstract

A system for recovery of data access of a locked secure storage device can comprise a keystore module and an authorization module. The keystore module may be configured to allow access to a master file system comprising a user encryption key for data stored within the locked secure storage device based on a master code. The authorization module may be configured to receive the administrator code, authenticate the administrator code, decode the master code, and reset a lockout parameter of the locked secure storage device.

Claims

1. A system for recovery of data access of a locked secure storage device, the system comprising:

a keystore module configured to allow access to a master file system comprising a user encryption key for data stored within the locked secure storage device based on a master code; and

an authorization module configured to receive the administrator code, authenticate the administrator code, decode the master code, and reset a lockout parameter of the locked secure storage device.

2. The system of claim 1, wherein the locked secure storage device comprises a locked detachable secure storage device.

3. The system of claim 1, wherein the locked secure storage device comprises the master file system.

4. The system of claim 1, wherein the locked secure storage device further comprises a user file system.

5. The system of claim 1, wherein the authorization module is further configured to receive a user code and decrypt the user encryption key using the user code.

6. The system of claim 1, wherein authenticating the administrator code comprises the authorization module configured to detect an administrator secure storage device.

7. The system of claim 6, wherein the authorization module is further configured to verify the administrator code.

8. The system of claim 1, wherein resetting the lockout parameter comprises the authorization module configured to reset a number of consecutive user code attempts.

9. The system of claim 1, wherein resetting the lockout parameter comprises the authorization module configured to receive a new user code from the administrator.

10. The system of claim 1, wherein resetting the lockout parameter comprises the authorization module configured to provide a user encryption key to an administrator.

11. The system of claim 10, wherein the user encryption key is encrypted by a user code.

12. The system of claim 10, wherein the user encryption key is encrypted by an administrator encryption key.

13. The system of claim 1, wherein resetting the lockout parameter comprises the authorization module configured to provide a master encryption key for the locked secure storage device to an administrator based on the master code.

14. A method for recovery of data access of a locked secure storage device, the method comprising:

receiving an administrator code;

authenticating the administrator code;

decoding a master code;

providing access to a master file system comprising a user encryption key for data stored within the locked secure storage device based on the master code; and

resetting a lockout parameter of the locked secure storage device.

15. The method of claim 14, wherein the locked secure storage device comprises a locked detachable secure storage device.

16. The method of claim 14, wherein the locked secure storage device comprises the master code.

17. The method of claim 14, wherein the locked secure storage device further comprises a user file system.

18. The method of claim 14, further comprising:

receiving a user code; and

decrypting the user encryption key using the user code.

19. The method of claim 14, wherein authenticating the administrator code comprises detecting an administrator secure storage device.

20. The method of claim 19, further comprising verifying the administrator code.

21. The method of claim 14, wherein resetting the lockout parameter of the locked secure storage device comprises resetting a number of consecutive user code attempts.

22. The method of claim 14, wherein resetting the lockout parameter comprises receiving a new user code from the administrator.

23. The method of claim 14, wherein resetting the lockout parameter of the locked secure storage device comprises providing the user encryption key to an administrator.

24. The method of claim 23, wherein the user encryption key is encrypted by a user code.

25. The method of claim 23, wherein the user encryption key is encrypted by an administrator encryption key.

26. The method of claim 14, wherein resetting the lockout parameter comprises providing a master encryption key for the locked secure storage device to an administrator based on the master code.

27. A computer readable medium having embodied thereon a program, the program being executable by a processor for performing a method for recovery of data access of a locked secure storage device, the method comprising:

receiving an administrator code;

authenticating the administrator code;

decoding a master code;

providing access to a master file system comprising a user encryption key for data stored within the locked secure storage device based on the master code; and

resetting a lockout parameter of the locked secure storage device.