Recovery of data access for a locked secure storage device

• US 8,335,920 B2
• Filed: 06/19/2007
• Issued: 12/18/2012
• Est. Priority Date: 07/14/2005
• Status: Active Grant

• Current Assignee: Data Locker Incorporated
• Original Assignee: Imation Corporation (Glassbridge Enterprises, Inc.)
• Inventors: Jevans, David Alexander
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US11/765,424
• Publication Number:
  US 20070300052A1
• Time in Patent Office: 2,009 Days
• Field of Search: 713/163, 710/1, 710/100
• US Class Current: 713/163
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers

Abstract

A system for recovery of data access of a locked secure storage device can comprise a keystore module and an authorization module. The keystore module may be configured to allow access to a master file system comprising a user encryption key for data stored within the locked secure storage device based on a master code. The authorization module may be configured to receive the administrator code, authenticate the administrator code, decode the master code, and reset a lockout parameter of the locked secure storage device.

Claims

1. A system for recovery of data access of a locked secure Universal Serial Bus (USB) storage device, the system comprising:

a secure USB storage device, the secure USB storage device being locked so as to no longer accept any user code, the secure USB storage device comprising;

a keystore module configured to allow access to a master file system comprising a user encryption key for data stored within the locked secure USB storage device based on a master code; and

an authorization module configured to receive an administrator code, authenticate the administrator code, decode the master code, and reset a lockout parameter of the locked secure USB storage device, thereby permitting acceptance of a user code.

2. The system of claim 1, wherein the locked secure USB storage device comprises a locked detachable secure USB storage device.

3. The system of claim 1, wherein the locked secure USB storage device comprises the master file system.

4. The system of claim 1, wherein the locked secure USB storage device further comprises a user file system.

5. The system of claim 1, wherein the authorization module is further configured to receive a user code and decrypt the user encryption key using the user code.

6. The system of claim 1, wherein authenticating the administrator code comprises the authorization module configured to detect an administrator secure USB storage device.

7. The system of claim 6, wherein the authorization module is further configured to verify the administrator code.

8. The system of claim 1, wherein resetting the lockout parameter comprises the authorization module configured to reset a number of consecutive user code attempts.

9. The system of claim 1, wherein resetting the lockout parameter comprises the authorization module configured to receive a new user code from the administrator.

10. The system of claim 1, wherein resetting the lockout parameter comprises the authorization module configured to provide a user encryption key to an administrator.

11. The system of claim 10, wherein the user encryption key is encrypted by a user code.

12. The system of claim 10, wherein the user encryption key is encrypted by an administrator encryption key.

13. The system of claim 1, wherein resetting the lockout parameter comprises the authorization module configured to provide a master encryption key for the locked secure USB storage device to an administrator based on the master code.

14. The system of claim 1, wherein the locked secure USB storage device is in a locked state due to the receipt of an incorrect user code a predetermined number of times, and the locked secure USB storage device cannot be unlocked by receipt of a correct user code.

15. A method for recovery of data access of a secure Universal Serial Bus (USB) storage device, the secure USB storage device being locked so as to no longer accept any user code, the method comprising:

receiving an administrator code;

authenticating the administrator code;

decoding a master code;

providing access to a master file system comprising a user encryption key for data stored within the locked secure USB storage device based on the master code; and

resetting a lockout parameter of the locked secure USB storage device, thereby permitting acceptance of a user code.

16. The method of claim 15, wherein the locked secure USB storage device comprises a locked detachable secure USB storage device.

17. The method of claim 15, wherein the locked secure USB storage device comprises the master code.

18. The method of claim 15, wherein the locked secure USB storage device further comprises a user file system.

19. The method of claim 15, further comprising:

receiving a user code; and

decrypting the user encryption key using the user code.

20. The method of claim 15, wherein authenticating the administrator code comprises detecting an administrator secure USB storage device.

21. The method of claim 20, further comprising verifying the administrator code.

22. The method of claim 15, wherein resetting the lockout parameter of the locked secure USB storage device comprises resetting a number of consecutive user code attempts.

23. The method of claim 15, wherein resetting the lockout parameter comprises receiving a new user code from the administrator.

24. The method of claim 15, wherein resetting the lockout parameter of the locked secure USB storage device comprises providing the user encryption key to an administrator.

25. The method of claim 24, wherein the user encryption key is encrypted by a user code.

26. The method of claim 24, wherein the user encryption key is encrypted by an administrator encryption key.

27. The method of claim 15, wherein resetting the lockout parameter comprises providing a master encryption key for the locked secure USB storage device to an administrator based on the master code.

28. A computer readable non-transitory storage medium having embodied thereon a program, the program being executable by a processor for performing a method for recovery of data access of a secure Universal Serial Bus (USB) storage device, the secure USB storage device being locked so as to no longer accept any user code, the method comprising:

receiving an administrator code;

authenticating the administrator code;

decoding a master code;

providing access to a master file system comprising a user encryption key for data stored within the locked secure USB storage device based on the master code; and

resetting a lockout parameter of the locked secure storage device, thereby permitting acceptance of a user code.