System and method for securely storing cryptographic keys with encrypted data

• US 8,566,617 B1
• Filed: 10/10/2011
• Issued: 10/22/2013
• Est. Priority Date: 06/30/2006
• Status: Active Grant

• Current Assignee: Veritas Technologies, LLC (Whitehouse Group Ltd.)
• Original Assignee: Symantec Operating Corporation (Gen Digital Inc.)
• Inventors: Clifford, Thomas G.
• Primary Examiner(s): ZECHER, CORDELIA P K
• Application Number:
  US13/270,037
• Time in Patent Office: 743 Days
• Field of Search: 713/193
• US Class Current: 713/193
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

The payload of a set of storage devices is encrypted using a payload key that is stored within the set of storage devices itself. However, the payload key is obtainable only if a user has access to n of the storage devices. A first set of keys can be distributed among a set of n storage devices, such that each key is usable to encrypt and/or decrypt a key stored on a different one of the n storage devices. The first set of keys is usable to encrypt portions of the information needed to regenerate another key (e.g., the payload key or a key used to encrypt the payload key). A different portion of the information needed to regenerate the other key is stored on each of the n storage devices. Accordingly, the other key cannot be obtained unless the user has access to all n storage devices.

Claims

1. A method comprising:

encrypting information for storage using a first cryptographic key;

writing a respective portion of the encrypted information to each of N storage devices, wherein N is an integer greater than two;

encrypting a portion of the first cryptographic key to generate an encrypted portion of the first cryptographic key;

writing the encrypted portion of the first cryptographic key to a first one of the N storage devices; and

writing a second cryptographic key to a second one of the N storage devices, wherein the second one is not the same as the first one, and wherein access to the second cryptographic key is required to decrypt the encrypted portion of the first cryptographic key.

2. The method of claim 1, wherein a different portion of the encrypted information is stored on each of the storage devices.

3. The method of claim 1, further comprising:

encrypting a portion of a third cryptographic key using the second cryptographic key, wherein the third cryptographic key is configured to decrypt the encrypted portion of the first cryptographic key; and

writing the encrypted portion of the third cryptographic key to a third one of the N storage devices.

4. A system comprising:

means for encrypting;

user information using a first cryptographic key, and

a portion of the first cryptographic key to generate an encrypted portion of the first cryptographic key; and

means for writing;

a respective portion of the encrypted user information to each of N storage devices, wherein N is an integer greater than two,

the encrypted portion of the first cryptographic key to a first one of the N storage devices, and

a second cryptographic key to a second one of the N storage devices, wherein the second one is not the same as the first one, and wherein access to the second cryptographic key is required to decrypt the encrypted portion of the first cryptographic key.

5. A non-transitory computer readable storage medium comprising program instructions executable to:

encrypt user information using a first cryptographic key;

encrypt a portion of the first cryptographic key to generate an encrypted portion of the first cryptographic key;

write a respective portion of the encrypted user information to each of N storage devices, wherein N is an integer greater than two;

write the encrypted portion of the first cryptographic key to a first one of the N storage devices; and

write a second cryptographic key to a second one of the N storage devices, wherein the second one is not the same as the first one, and wherein access to the second cryptographic key is required to decrypt the encrypted portion of the first cryptographic key.

6. A system comprising:

a key distribution module configured to;

generate a first cryptographic key and a second cryptographic key;

subdivide the second cryptographic key into N portions, wherein N is an integer greater than two;

initiate encryption of each of the portions of the second cryptographic key, wherein

a portion of the second cryptographic key is encrypted to generate an encrypted portion of the second cryptographic key; and

store the encrypted portion of the second cryptographic key to a first one of N storage devices, wherein

each of the storage devices stores encrypted user data,

the second cryptographic key is usable for recovery of the encrypted user data, and

the first cryptographic key is stored on a different one of the N plurality of storage devices than the first one of the N storage devices, and

access to the first cryptographic key is required to decrypt the encrypted portion of the second cryptographic key.

7. The system of claim 6, wherein the second cryptographic key is a payload key used to encrypt user information stored on at least one of the storage devices.

8. The system of claim 6, wherein the key distribution module is configured to:

generate a payload key;

subdivide the payload key into a plurality of portions;

initiate encryption of each portion of the payload key using the second cryptographic key; and

store each portion of the payload key on a respective one of the storage devices, wherein each of the storage devices stores a different portion of the payload key.