Method and system for disaster recovery of data from a storage device

• US 20040228493A1
• Filed: 05/14/2003
• Published: 11/18/2004
• Est. Priority Date: 05/14/2003
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Ma, Kenneth
• Granted Patent: US 7,415,115 B2
• Time in Patent Office: Days
• US Class Current: 380/286
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

Aspects of the invention provide a method and system for securely managing the storage and retrieval of data. Securely managing the storage and retrieval of data may include receiving a first disaster recovery code and acquiring a first password corresponding to the first disaster recovery code. A first disaster recovery key may be generated based on the first disaster recovery code and the first password. Another aspect of the invention may also include generating the received first disaster recovery code based on said first password and the first disaster recovery key. The generated disaster recovery code may be securely stored on at least a portion of a storage device or a removable media. Data stored on the storage device may be encrypted using the first generated disaster recovery key. Additionally, data read from the storage device may be decrypted using the generated first disaster recovery key.

Claims

1. A method for securely managing the storage and retrieval of data, the method comprising:

receiving a first disaster recovery code;

receiving a first password corresponding to said first disaster recovery code; and

generating a first disaster recovery key based on said first disaster recovery code and said first password.

2. The method according to claim 1, further comprising generating said received first disaster recovery code based on said first password and said first disaster recovery key.

3. The method according to claim 2, further comprising securely storing said generated disaster recovery code.

4. The method according to claim 2, further comprising encrypting data stored on a storage device using said generated first disaster recovery key.

5. The method according to claim 2, further comprising decrypting data read from a storage device using said generated first disaster recovery key.

6. The method according to claim 5, further comprising selecting between a normal operating mode and a recovery operating mode, said recovery operating mode utilizing said generation of said first disaster recovery key.

7. The method according to claim 5, further comprising bypassing said decrypting of said data read from said storage device.

8. The method according to claim 7, further comprising selecting at least one bypass path for said bypassing of said decryption.

9. The method according to claim 4, further comprising bypassing said encrypting of said data stored on said storage device.

10. The method according to claim 9, further comprising selecting at least one bypass path for said bypassing of said encryption.

11. A machine-readable storage having stored thereon, a computer program having at least one code section for securely managing the storage and retrieval of data, the at least one code section being executable by a machine for causing the machine to perform steps comprising:

receiving a first disaster recovery code;

receiving a first password corresponding to said first disaster recovery code; and

generating a first disaster recovery key based on said first disaster recovery code and said first password.

12. The machine-readable storage according to claim 11, further comprising code for generating said received first disaster recovery code based on said first password and said first disaster recovery key.

13. The machine-readable storage according to claim 12, further comprising code for securely storing said generated disaster recovery code.

14. The machine-readable storage according to claim 12, further comprising code for encrypting data stored on a storage device using said generated first disaster recovery key.

15. The machine-readable storage according to claim 12, further comprising code for decrypting data read from a storage device using said generated first disaster recovery key.

16. The machine-readable storage according to claim 15, further comprising code for selecting between a normal operating mode and a recovery operating mode, said recovery operating mode utilizing said generation of said first disaster recovery key.

17. The machine-readable storage according to claim 15, further comprising code for bypassing said decrypting of said data read from said storage device.

18. The machine-readable storage according to claim 17, further comprising code for selecting at least one bypass path for said bypassing of said decryption.

19. The machine-readable storage according to claim 14, further comprising code for bypassing said encrypting of said data stored on said storage device.

20. The machine-readable storage according to claim 19, further comprising code for selecting at least one bypass path for said bypassing of said encryption.

21. A system for securely managing the storage and retrieval of data, the system comprising:

at least one processor adapted to at least receive a first disaster recovery code;

said at least one processor adapted to at least receive a first password corresponding to said first disaster recovery code; and

a disaster management block adapted to generate a first disaster recovery key based on said first disaster recovery code and said first password.

22. The system according to claim 21, further comprising a recovery code generator adapted to generate said received first disaster recovery code based on said first password and said first disaster recovery key.

23. The system according to claim 22, wherein said at least one processor is adapted to securely control storage of said generated disaster recovery code on at least one of a storage device and a storage media.

24. The system according to claim 23, further comprising a storage device interface block adapted to facilitate coupling of said at least one of said storage device and said storage media.

25. The system according to claim 24, further comprising an encryption block adapted encrypt data stored on said storage device using said generated first disaster recovery key.

26. The system according to claim 25, further comprising a decryption block adapted to decrypt data read from said storage device using said generated first disaster recovery key.

27. The system according to claim 26, further comprising a selector adapted to select between a normal operating mode and a recovery operating mode, said recovery operating mode utilizing said generation of said first disaster recovery key.

28. The system according to claim 27, further comprising at least one bypass path adapted to bypass said decryption block.

29. The system according to claim 28, further comprising at least one bypass control register adapted to control selection of said at least one bypass path for said decryption block.

30. The system according to claim 29, wherein said at least one bypass path is adapted to bypass said encryption block.

31. The system according to claim 30, wherein said at least one bypass control register is adapted to control selection of said at least one bypass path for said encryption block.

32. The system according to claim 31, further comprising at least one bus interface block coupled to at least one of said encryption block and said decryption block.

33. The system according to claim 32, further comprising at least one register for storing said disaster recovery key.

34. The system according to claim 33, wherein said at least one register for storing said disaster recovery key is a read-only register.

35. The system according to claim 33, wherein said at least one processor, said disaster management block, said selector, said at least one bypass path, said at least one bypass control register, said encryption block, said decryption block, said at least one bus interface block, said storage device interface block and said at least one register for storing said disaster recovery key is integrated in one of a plug-in card, a chip and a processor core.