System and method for wiping encrypted data on a device having file-level content protection
    1.
    发明授权
    System and method for wiping encrypted data on a device having file-level content protection 有权
    用于在具有文件级内容保护的设备上擦除加密数据的系统和方法

    公开(公告)号:US08433901B2

    公开(公告)日:2013-04-30

    申请号:US12756094

    申请日:2010-04-07

    IPC分类号: H04L29/06 G06F11/30 G06F7/04

    摘要: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for erasing user data stored in a file system. The method includes destroying all key bags containing encryption keys on a device having a file system encrypted on a per file and per class basis, erasing and rebuilding at least part of the file system associated with user data, and creating a new default key bag containing encryption keys. Also disclosed herein is a method of erasing user data stored in a remote file system encrypted on a per file and per class basis. The method includes transmitting obliteration instructions to a remote device, which cause the remote device to destroy all key bags containing encryption keys on the remote device, erase and rebuild at least part of the file system associated with user data, and create on the remote device a new default key bag containing encryption keys.

    摘要翻译: 这里公开了用于擦除存储在文件系统中的用户数据的系统,方法和非暂时的计算机可读存储介质。 该方法包括在具有每个文件和每个类基础上加密的文件系统的设备上破坏包含加密密钥的所有密钥袋,擦除和重建与用户数据相关联的文件系统的至少一部分,以及创建新的默认密钥袋, 加密密钥。 本文还公开了一种擦除存储在以每个文件和每个类为基础加密的远程文件系统中的用户数据的方法。 该方法包括向远程设备发送闭塞指令,这导致远程设备破坏包含远程设备上的加密密钥的所有密钥袋,擦除并重建与用户数据相关联的文件系统的至少一部分,并在远程设备上创建 一个包含加密密钥的新的默认密钥袋。

    System and method for backing up and restoring files encrypted with file-level content protection
    2.
    发明授权
    System and method for backing up and restoring files encrypted with file-level content protection 有权
    用于备份和恢复使用文件级内容保护加密的文件的系统和方法

    公开(公告)号:US08412934B2

    公开(公告)日:2013-04-02

    申请号:US12756148

    申请日:2010-04-07

    IPC分类号: H04L29/06 H04L9/00 G06F7/04

    摘要: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for initiating a backup, backing up encrypted data, and restoring backed up encrypted data. The method for initiating a backup includes sending a backup secret to a backup device having an encrypted file system, receiving from the backup device a backup ticket created based on the backup secret, and storing the backup ticket. The method for backing up encrypted data includes receiving a backup ticket and a backup secret, retrieving an escrow key bag containing protection class keys, decrypting the protection class keys with the backup ticket, generating a backup key bag containing new protection class keys, selecting a set of encrypted files to back up, decrypting the file encryption keys with corresponding decrypted protection class keys, re-encrypting the file encryption keys with new protection class keys, and transferring the selected encrypted files, the backup key bag, and metadata.

    摘要翻译: 本文公开了用于发起备份,备份加密数据和恢复备份的加密数据的系统,方法和非暂时的计算机可读存储介质。 用于发起备份的方法包括向具有加密文件系统的备份设备发送备份秘密,从备份设备接收基于备份秘密创建的备份故障单,并存储备份故障单。 用于备份加密数据的方法包括接收备份票据和备份秘密,检索包含保护类密钥的托管密钥袋,用备份凭证解密保护类密钥,生成包含新保护等级密钥的备份密钥袋,选择 一组加密文件进行备份,用相应的解密保护类密钥解密文件加密密钥,用新的保护类密钥重新加密文件加密密钥,并传送所选择的加密文件,备份密钥包和元数据。

    System and method for synchronizing encrypted data on a device having file-level content protection
    4.
    发明授权
    System and method for synchronizing encrypted data on a device having file-level content protection 有权
    在具有文件级内容保护的设备上同步加密数据的系统和方法

    公开(公告)号:US08589680B2

    公开(公告)日:2013-11-19

    申请号:US12756123

    申请日:2010-04-07

    IPC分类号: H04L9/00 G06F21/00

    摘要: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for initiating data synchronization between devices. The method includes sending a host identifier and pairing record to a second device having a file system encrypted on a per file and on a per class basis for a set of classes, receiving from the second device a sync ticket containing encryption keys for the set of classes, and storing the sync ticket. Also disclosed is a method for synchronizing encrypted data between devices. This method includes receiving, at a first device having a file system encrypted on a per file and on a per class basis, a sync ticket containing encryption keys from a second device, retrieving an escrow key bag containing protection class keys, decrypting protection class keys based on the sync ticket, and synchronizing data with the second device based on the decrypted protection class keys.

    摘要翻译: 这里公开了用于启动设备之间的数据同步的系统,方法和非暂时的计算机可读存储介质。 该方法包括将主机标识符和配对记录发送到具有在每个文件上加密的文件系统的第二设备以及针对一组类别的每个类的基础,从第二设备接收包含用于该组的加密密钥的同步票据 课程,并存储同步票。 还公开了一种用于在设备之间同步加密数据的方法。 该方法包括在具有在每个文件上加密的文件系统的第一设备和基于每个类的基础上接收包含来自第二设备的加密密钥的同步票据,检索包含保护类密钥的托管密钥袋,解密保护等级密钥 基于同步票据,并且基于解密的保护等级密钥与第二设备同步数据。