Data security for digital data storage

• US 20070005959A1
• Filed: 06/14/2006
• Published: 01/04/2007
• Est. Priority Date: 03/27/2001
• Status: Active Grant

• Current Assignee: Micron Technology, Inc.
• Original Assignee: Micron Technology, Inc.
• Inventors: Rollins, Doug
• Granted Patent: US 7,540,018 B2
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]

Abstract

A computing system includes data encryption in the data path between a data source and data storage devices. The data storage devices may be local or they may be network resident. The data encryption may utilize a key which is derived at least in part from an identification code stored in a non-volatile memory. The key may also be derived at least in part from user input to the computer. In a LAN embodiment, public encryption keys may be automatically transferred to a network server for file encryption prior to file transfer to a client system.

Claims

1. A computer network having one or more servers storing data files created by one or more clients comprising:

means for receiving a request for data at a network server from a client computer system by a requester;

means for checking a file attribute of the requested data using the network server to determine whether the requested data is encrypted with an encryption key;

when the requested data is encrypted. means for checking the file attribute of the requested data using the network server to determine an owner of the encryption key; and

means for comparing the owner of the encrvption key with the requestor to determine whether the data was encrypted with the requestor'"'"'s encryption key.

2. The network of claim 1, further comprising:

means for automatically retrieving using the network server a public encryption key from the client computer system when the data is not encrypted; and

means for encrypting the unencrypted data with the public encryption key automatically and without user intervention; and

means for sending the encrypted data to the client computer system.

3. The network of claim 1, further comprising a means for sending the requestor a message indicating the data is not encrypted with the requestor'"'"'s encryption key when the data is encrypted and the requester is not the owner of the encryption key.

4. The network of claim 1, further comprising a means for sending the encrypted data to the client computer system when the data is encrypted and the requestor is the owner of the encryption key.

5. The network of claim 1, wherein the encryption key is derived at least in part from an identification code.

6. The network of claim 5, wherein the encryption key is derived at least in part from user input.

7. The network of claim 6, wherein the encryption key is generated during a boot operation.

12. The network of claim 1, wherein the encryption key is derived at least in part from an identification code.

13. The network of claim 12, wherein the encryption key is derived at least in part from user input.

14. The network of claim 13, wherein the encryption key is generated during a boot operation.

8. A computer network having one or more servers storing data files created by one or more clients comprising:

one or more computer processors configured to receive a request for data at a network server from a client computer system by a requester;

one or more computer processors configured to check a file attribute of the requested data using the network server to determine whether the requested data is encrypted with an encryption key;

when the requested data is encrypted, one or more computer processors configured to check the file attribute of the requested data using the network server to determine an owner of the. encryption key; and

one or more computer processors configured to compare the owner of the encryption key with the requester to determine whether the data was encrypted with the requestor'"'"'s encryption key.

9. The network of claim 8, further comprising:

one or more computer processors configured to automatically retrieve using the network server a public encryption key from the client computer system when the data is not encrypted; and

one or more computer processors configured to encrypt the unencrypted data with the public encryption key automatically and without user intervention; and

one or more computer processors configured to send the encrypted data to the client computer system.

10. The network of claim 8, further comprising one or more computer processors configured to send the requester a message indicating the data is not encrypted with the requestor'"'"'s encryption key when the data is encrypted and the requestor is not the owner of the encryption key.

11. The network of claim 8, further comprising one or more computer processors configured to send the encrypted data to the client computer system when the data is encrypted and the requester is the owner of the encryption key.