System and method for encrypted disk drive sanitizing

• US 9,817,609 B2
• Filed: 07/18/2016
• Issued: 11/14/2017
• Est. Priority Date: 09/09/2013
• Status: Active Grant

• Current Assignee: WhiteCanyon Software, Inc.
• Original Assignee: WhiteCanyon Software, Inc.
• Inventors: Griffes, Donald E., Pedigo, Daniel S., Nuttall, Dean V.
• Primary Examiner(s): MOORTHY, ARAVIND K
• Application Number:
  US15/212,572
• Publication Number:
  US 20170131945A1
• Time in Patent Office: 484 Days
• Field of Search: 713193, 713165, 380 44
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/0652 Erasing, e.g. deleting, data cleaning, moving of data to a wastebasket
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A system and method for first changing the encryption key on a self-encrypting disk drive followed by a complete disk wipe. Either process can be separately performed, and they can be performed in any order. In fact, one embodiment of the invention, resets the symmetric key, wipes the disk a predetermined number of times with different predetermined data patterns, and then resets the key a second time. This assures that there is absolutely no way to recover the original key or to read the original plain text data, even if some of it'"'"'s encrypted values remain on unallocated tracks after wiping. A user can be assured that in milliseconds after starting the wiping process, the entire disk is rendered unreadable and unrecoverable.

Claims

1. A system for sanitizing a self-encrypting hard disk comprising:

a disk interface accessible over a network, said disk interface configured to electrically connect to a self-encrypting hard disk drive and send commands to said disk drive and to transfer data to and from said disk drive;

said disk interface constructed to authenticate itself to said disk drive to a level of authentication where it can issue a command for the disk drive to change the value of at least one cryptographic key;

said disk interface further constructed to send a command to the disk drive that causes at least one cryptographic key in the disk drive to change value;

said disk interface further constructed to write predetermined data patterns to every sector on the disk drive a specified number of times;

said disk interface configured to report over said network completion of sanitation of the disk drive.

2. The system of claim 1 further constructed to send a second command to said disk drive that causes said at least one cryptographic key to change value a second time.

3. The system of claim 2 further configured to format the disk drive after said cryptographic key changes value a second time.

4. The system of claim 1 further configured to format the disk drive after said predetermined data patterns are written.

5. The system of claim 1 further comprising a user interface configured to communicate with said disk interface over the network.

6. The system of claim 5 wherein the user interface is constructed to permit a user to choose options related to sanitizing said disk drive.

7. A method of sanitizing a self-encrypting disk drive containing an internal cryptographic key comprising:

receiving a set of options from a user over a network relating to sanitizing the disk drive;

issuing a command to the disk drive causing the internal cryptographic key to change value;

writing a predetermined data pattern to each address of the disk drive;

reporting to the user over the network that the disk drive has been sanitized according to the options.

8. The method of claim 7 further comprising issuing a second command to the disk drive that causes the internal cryptographic key to change value a second time.

9. The method of claim 8 further comprising formatting the disk drive after said cryptographic key changes value a second time.

10. The method of claim 8 further comprising providing a user interface configured to communicate the said disk interface over the network.

11. The method of claim 10 wherein the user interface is permits a user to choose options related to sanitizing the disk drive.

12. The method of claim 7 further comprising formatting the disk drive after said predetermined data patterns are written.

13. A system for sanitizing a self-encrypting storage device comprising:

a device interface accessible over a network from a remote terminal, the device interface configured to electrically connect to a self-encrypting storage device and send commands to said storage device and to transfer data to and from said storage device;

the device interface constructed to authenticate itself to said storage device at a level high enough to allow a cryptographic key reset;

the device interface further constructed to send a command to the storage device that causes a cryptographic key in said storage device to change value;

the device interface further constructed to write predetermined data patterns to every location on the storage device a specified number of times;

the device interface also constructed to report over said network to the remote terminal completion of sanitation of the storage device.

14. The system of claim 13 further constructed to send a second command to said storage device that causes the cryptographic key to change value a second time.

15. The system of claim 13 wherein the remote terminal executes stored instructions to permit a user to choose options related to sanitizing the storage device.

16. The system of claim 13 wherein the remote terminal is a handheld wireless device.

17. The system of claim 16 wherein the handheld wireless device is a smartphone and said smartphone executes a wirelessly downloaded application.