System and method for backing up and restoring files encrypted with file-level content protection
    3.
    发明授权
    System and method for backing up and restoring files encrypted with file-level content protection 有权
    用于备份和恢复使用文件级内容保护加密的文件的系统和方法

    公开(公告)号:US08412934B2

    公开(公告)日:2013-04-02

    申请号:US12756148

    申请日:2010-04-07

    IPC分类号: H04L29/06 H04L9/00 G06F7/04

    摘要: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for initiating a backup, backing up encrypted data, and restoring backed up encrypted data. The method for initiating a backup includes sending a backup secret to a backup device having an encrypted file system, receiving from the backup device a backup ticket created based on the backup secret, and storing the backup ticket. The method for backing up encrypted data includes receiving a backup ticket and a backup secret, retrieving an escrow key bag containing protection class keys, decrypting the protection class keys with the backup ticket, generating a backup key bag containing new protection class keys, selecting a set of encrypted files to back up, decrypting the file encryption keys with corresponding decrypted protection class keys, re-encrypting the file encryption keys with new protection class keys, and transferring the selected encrypted files, the backup key bag, and metadata.

    摘要翻译: 本文公开了用于发起备份,备份加密数据和恢复备份的加密数据的系统,方法和非暂时的计算机可读存储介质。 用于发起备份的方法包括向具有加密文件系统的备份设备发送备份秘密,从备份设备接收基于备份秘密创建的备份故障单,并存储备份故障单。 用于备份加密数据的方法包括接收备份票据和备份秘密,检索包含保护类密钥的托管密钥袋,用备份凭证解密保护类密钥,生成包含新保护等级密钥的备份密钥袋,选择 一组加密文件进行备份,用相应的解密保护类密钥解密文件加密密钥,用新的保护类密钥重新加密文件加密密钥,并传送所选择的加密文件,备份密钥包和元数据。

    SYSTEM AND METHOD FOR BACKING UP AND RESTORING FILES ENCRYPTED WITH FILE-LEVEL CONTENT PROTECTION
    4.
    发明申请
    SYSTEM AND METHOD FOR BACKING UP AND RESTORING FILES ENCRYPTED WITH FILE-LEVEL CONTENT PROTECTION 有权
    用于备份和恢复文件加密文件级内容保护的系统和方法

    公开(公告)号:US20110252233A1

    公开(公告)日:2011-10-13

    申请号:US12756148

    申请日:2010-04-07

    IPC分类号: H04L29/06 G06F17/30

    摘要: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for initiating a backup, backing up encrypted data, and restoring backed up encrypted data. The method for initiating a backup includes sending a backup secret to a backup device having an encrypted file system, receiving from the backup device a backup ticket created based on the backup secret, and storing the backup ticket. The method for backing up encrypted data includes receiving a backup ticket and a backup secret, retrieving an escrow key bag containing protection class keys, decrypting the protection class keys with the backup ticket, generating a backup key bag containing new protection class keys, selecting a set of encrypted files to back up, decrypting the file encryption keys with corresponding decrypted protection class keys, re-encrypting the file encryption keys with new protection class keys, and transferring the selected encrypted files, the backup key bag, and metadata.

    摘要翻译: 本文公开了用于发起备份,备份加密数据和恢复备份的加密数据的系统,方法和非暂时的计算机可读存储介质。 用于发起备份的方法包括向具有加密文件系统的备份设备发送备份秘密,从备份设备接收基于备份秘密创建的备份故障单,并存储备份故障单。 用于备份加密数据的方法包括接收备份票据和备份秘密,检索包含保护类密钥的托管密钥袋,用备份凭证解密保护类密钥,生成包含新保护等级密钥的备份密钥袋,选择 一组加密文件进行备份,用相应的解密保护类密钥解密文件加密密钥,用新的保护类密钥重新加密文件加密密钥,并传送所选择的加密文件,备份密钥包和元数据。

    SYSTEM AND METHOD FOR WIPING ENCRYPTED DATA ON A DEVICE HAVING FILE-LEVEL CONTENT PROTECTION
    5.
    发明申请
    SYSTEM AND METHOD FOR WIPING ENCRYPTED DATA ON A DEVICE HAVING FILE-LEVEL CONTENT PROTECTION 有权
    用于在具有文件级内容保护的设备上擦写加密数据的系统和方法

    公开(公告)号:US20110252232A1

    公开(公告)日:2011-10-13

    申请号:US12756094

    申请日:2010-04-07

    IPC分类号: G06F21/24

    摘要: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for erasing user data stored in a file system. The method includes destroying all key bags containing encryption keys on a device having a file system encrypted on a per file and per class basis, erasing and rebuilding at least part of the file system associated with user data, and creating a new default key bag containing encryption keys. Also disclosed herein is a method of erasing user data stored in a remote file system encrypted on a per file and per class basis. The method includes transmitting obliteration instructions to a remote device, which cause the remote device to destroy all key bags containing encryption keys on the remote device, erase and rebuild at least part of the file system associated with user data, and create on the remote device a new default key bag containing encryption keys.

    摘要翻译: 这里公开了用于擦除存储在文件系统中的用户数据的系统,方法和非暂时性的计算机可读存储介质。 该方法包括在具有每个文件和每个类基础上加密的文件系统的设备上破坏包含加密密钥的所有密钥袋,擦除和重建与用户数据相关联的文件系统的至少一部分,以及创建新的默认密钥袋, 加密密钥。 本文还公开了一种擦除存储在以每个文件和每个类为基础加密的远程文件系统中的用户数据的方法。 该方法包括向远程设备发送闭塞指令,这导致远程设备破坏包含远程设备上的加密密钥的所有密钥袋,擦除并重建与用户数据相关联的文件系统的至少一部分,并在远程设备上创建 一个包含加密密钥的新的默认密钥袋。

    System and method for wiping encrypted data on a device having file-level content protection
    6.
    发明授权
    System and method for wiping encrypted data on a device having file-level content protection 有权
    用于在具有文件级内容保护的设备上擦除加密数据的系统和方法

    公开(公告)号:US08433901B2

    公开(公告)日:2013-04-30

    申请号:US12756094

    申请日:2010-04-07

    IPC分类号: H04L29/06 G06F11/30 G06F7/04

    摘要: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for erasing user data stored in a file system. The method includes destroying all key bags containing encryption keys on a device having a file system encrypted on a per file and per class basis, erasing and rebuilding at least part of the file system associated with user data, and creating a new default key bag containing encryption keys. Also disclosed herein is a method of erasing user data stored in a remote file system encrypted on a per file and per class basis. The method includes transmitting obliteration instructions to a remote device, which cause the remote device to destroy all key bags containing encryption keys on the remote device, erase and rebuild at least part of the file system associated with user data, and create on the remote device a new default key bag containing encryption keys.

    摘要翻译: 这里公开了用于擦除存储在文件系统中的用户数据的系统,方法和非暂时的计算机可读存储介质。 该方法包括在具有每个文件和每个类基础上加密的文件系统的设备上破坏包含加密密钥的所有密钥袋,擦除和重建与用户数据相关联的文件系统的至少一部分,以及创建新的默认密钥袋, 加密密钥。 本文还公开了一种擦除存储在以每个文件和每个类为基础加密的远程文件系统中的用户数据的方法。 该方法包括向远程设备发送闭塞指令,这导致远程设备破坏包含远程设备上的加密密钥的所有密钥袋,擦除并重建与用户数据相关联的文件系统的至少一部分,并在远程设备上创建 一个包含加密密钥的新的默认密钥袋。

    Mobile Device Management
    7.
    发明申请
    Mobile Device Management 有权
    移动设备管理

    公开(公告)号:US20110252240A1

    公开(公告)日:2011-10-13

    申请号:US12756146

    申请日:2010-04-07

    摘要: Methods and apparatuses that enroll a wireless device into an enterprise service with a management server addressed in a management profile are described. The enrollment may grant a control of configurations of the wireless device to the management server via the management profile. In response to receiving a notification from the management server, a trust of the notification may be verified against the management profile. If the trust is verified, a network session may be established with the management server. The network session may be secured via a certificate in the management profile. Management operations may be performed for management commands received over the secure network session to manage the configurations transparently to a user of the wireless device according to the control.

    摘要翻译: 描述了使用管理简档中寻址的管理服务器将无线设备注册到企业服务中的方法和装置。 注册可以通过管理简档向管理服务器授予对无线设备的配置的控制。 响应于从管理服务器接收到通知,可以针对管理简档来验证通知的信任。 如果信任被验证,则可以与管理服务器建立网络会话。 可以通过管理简档中的证书来保护网络会话。 可以对通过安全网络会话接收的管理命令执行管理操作,以根据该控制向无线设备的用户透明地管理配置。

    ASSET STREAMING
    8.
    发明申请
    ASSET STREAMING 有权
    资产流动

    公开(公告)号:US20120311095A1

    公开(公告)日:2012-12-06

    申请号:US13225533

    申请日:2011-09-05

    IPC分类号: G06F15/16

    摘要: A device streams assets to network-based storage, and servers administering the network-based storage operate to notify other authorized devices that the assets are available to download, including initiating the download of assets automatically or in response to user input. With streaming enabled on their device, a user is able to make assets, such as digital photograph, video or other type of media file, data file, or other type of electronic content, available immediately to all of their other devices and to other users having permission to follow assets streamed by their device. Servers secure access to the stream of assets, on both an account level and an asset level in accordance with asset metadata registered for the assets during streaming.

    摘要翻译: 设备将资源转移到基于网络的存储,并且管理基于网络的存储的服务器操作以通知其他授权设备资产可用于下载,包括自动启动资产下载或响应于用户输入。 通过在其设备上启用流式传输,用户能够制作资源,例如数字照片,视频或其他类型的媒体文件,数据文件或其他类型的电子内容,可以立即到达所有其他设备和其他用户 有权遵守其设备流传的资产。 服务器根据在流媒体资源中注册的资产元数据,在帐户级别和资产级别上安全地访问资产流。

    Asset streaming
    9.
    发明授权
    Asset streaming 有权
    资产流式传输

    公开(公告)号:US09118642B2

    公开(公告)日:2015-08-25

    申请号:US13225533

    申请日:2011-09-05

    摘要: A device streams assets to network-based storage, and servers administering the network-based storage operate to notify other authorized devices that the assets are available to download, including initiating the download of assets automatically or in response to user input. With streaming enabled on their device, a user is able to make assets, such as digital photograph, video or other type of media file, data file, or other type of electronic content, available immediately to all of their other devices and to other users having permission to follow assets streamed by their device. Servers secure access to the stream of assets, on both an account level and an asset level in accordance with asset metadata registered for the assets during streaming.

    摘要翻译: 设备将资源转移到基于网络的存储,并且管理基于网络的存储的服务器操作以通知其他授权设备资产可用于下载,包括自动启动资产下载或响应于用户输入。 通过在其设备上启用流式传输,用户能够制作资源,例如数字照片,视频或其他类型的媒体文件,数据文件或其他类型的电子内容,可以立即发送到所有其他设备和其他用户 有权遵守其设备流传的资产。 服务器根据在流媒体资源中注册的资产元数据,在帐户级别和资产级别上安全地访问资产流。

    Mobile device management
    10.
    发明授权

    公开(公告)号:US08473743B2

    公开(公告)日:2013-06-25

    申请号:US12756146

    申请日:2010-04-07

    IPC分类号: H04L9/32

    摘要: Methods and apparatuses that enroll a wireless device into an enterprise service with a management server addressed in a management profile are described. The enrollment may grant a control of configurations of the wireless device to the management server via the management profile. In response to receiving a notification from the management server, a trust of the notification may be verified against the management profile. If the trust is verified, a network session may be established with the management server. The network session may be secured via a certificate in the management profile. Management operations may be performed for management commands received over the secure network session to manage the configurations transparently to a user of the wireless device according to the control.