System and method for encrypted disk drive sanitizing

• US 9,396,359 B2
• Filed: 09/09/2013
• Issued: 07/19/2016
• Est. Priority Date: 09/09/2013
• Status: Active Grant

• Current Assignee: WhiteCanyon Software, Inc.
• Original Assignee: WhiteCanyon Software, Inc.
• Inventors: Griffes, Donald E., Pedigo, Daniel S., Nuttall, Dean V.
• Primary Examiner(s): MOORTHY, ARAVIND K
• Application Number:
  US14/021,748
• Publication Number:
  US 20150074425A1
• Time in Patent Office: 1,044 Days
• Field of Search: 713/193, 713/165, 380/44
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/0652 Erasing, e.g. deleting, data cleaning, moving of data to a wastebasket
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A system and method for first changing the encryption key on a self-encrypting disk drive followed by a complete disk wipe. Either process can be separately performed, and they can be performed in any order. In fact, one embodiment of the invention, resets the symmetric key, wipes the disk a predetermined number of times with different predetermined data patterns, and then resets the key a second time. This assures that there is absolutely no way to recover the original key or to read the original plain text data, even if some of it'"'"'s encrypted values remain on unallocated tracks after wiping. A user can be assured that in milliseconds after starting the wiping process, the entire disk is rendered unreadable and unrecoverable.

Claims

1. A system for quickly sanitizing a self-encrypting hard disk of the type containing an encryption key in disk drive hardware comprising:

a disk interface accessible over a network, said disk interface configured to electrically connect to a self-encrypting hard disk drive containing an internally generate encryption key and send commands to said disk drive and to transfer data to and from said disk drive;

said disk interface adapted to authenticate itself to said disk drive at a level sufficient to allow it to issue a command to the disk drive a new encryption key;

said disk interface further adapted to send a command to said disk drive that causes the disk drive to internally generate a new encryption key;

said disk interface further adapted to write predetermined data patterns to every sector on said disk drive a specified number of times after the new encryption key is generated;

said disk interface configured to report over said network completion of sanitation of said disk drive.

2. The system of claim 1 further configured to send a second command to said disk drive that causes said disk drive to generate a second new encryption key.

3. The system of claim 2 further configured to format said disk drive after said encryption key changes value a second time.

4. The system of claim 1 further configured to format said disk drive after said predetermined data patterns are written.

5. The system of claim 1 further comprising a user interface configured to communicate with said disk interface over the network.

6. The system of claim 5 wherein said user interface is adapted to permit a user to choose options related to sanitizing said disk drive.

7. The system of claim 1 wherein the device interface authorizes by sending a key encrypting key (KEK) to the storage device.

8. A method of sanitizing a self-encrypting disk drive of the type with an internally generated encryption key comprising:

receiving over a network from a user a set of options for sanitizing said disk drive;

performing an authentication with the disk drive at a level allowing issuing of a command to the disk drive to generate a new encryption key;

issuing a command to said disk drive causing the disk drive to generate a new encryption key;

writing a predetermined data pattern to each address of said disk drive;

issuing a second command to said disk drive causing the disk drive to generate a second new encryption key;

reporting to said user over the network that said disk drive has been sanitized according to said options.

9. The method of claim 8 further comprising providing a user interface configured to communicate with said disk interface over the network.

10. The method of claim 9 wherein said user interface is permits a user to choose options related to sanitizing said disk drive.

11. The method of claim 8 further comprising formatting said disk drive after the disk drive generates a second new encryption key.

12. A system for sanitizing a self-encrypting storage device of the type having an internally generated encryption key comprising:

a device interface accessible over a network from a remote terminal, said device interface configured to electrically connect to a self-encrypting storage device and send commands to said storage device and to transfer data to and from said storage device;

said device interface adapted to authenticate itself to said storage device at a level high enough to allow issuing a command that causes the storage device to generate a new encryption key;

said device interface further adapted to send a command to said storage device that causes the storage device to generate a new encryption key;

said device interface further adapted to write predetermined data patterns to every location on said storage device a specified number of times after the storage device has generated a new encryption key;

said device interface configured to report over said network to said remote terminal completion of sanitation of said storage device.

13. The system of claim 12 further configured to send a second command to said storage device that causes the storage device to generate a second new encryption key.

14. The system of claim 12 wherein said remote terminal executes stored instructions to permit a user to choose options related to sanitizing said storage device.

15. The system of claim 12 wherein said remote terminal is a handheld wireless device.

16. The system of claim 15 wherein said handheld wireless device is a smartphone and said smartphone executes a wirelessly downloaded application.

17. The system of claim 12 wherein the device interface authorizes by sending a key encrypting key (KEK) to the storage device.