The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Apr. 07, 2020

Filed:

Mar. 20, 2014
Applicant:

Microsoft Technology Licensing, Llc, Redmond, WA (US);

Inventors:

Innokentiy Basmov, Redmond, WA (US);

Magnus Bo Gustaf Nyström, Sammamish, WA (US);

Niels T. Ferguson, Redmond, WA (US);

Alex M. Semenko, Issaquah, WA (US);

Assignee:
Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 11/30 (2006.01); G06F 12/14 (2006.01); H04L 9/08 (2006.01); G06F 21/74 (2013.01); G06F 21/78 (2013.01); G06F 21/60 (2013.01);
U.S. Cl.
CPC ...
H04L 9/0816 (2013.01); G06F 21/602 (2013.01); G06F 21/74 (2013.01); G06F 21/78 (2013.01); H04L 2209/24 (2013.01);
Abstract

A computing device uses a data encryption and decryption system that includes a trusted runtime and an inline cryptographic processor. The trusted runtime provides a trusted execution environment, and the inline cryptographic processor provides decryption and encryption of data in-line with storage device read and write operations. When a portion (e.g., partition) of a storage device is defined, the trusted runtime generates an encryption key and provides the encryption key to the inline cryptographic processor, which uses the encryption key to encrypt data written to the portion and decrypt data read from the portion. Access to the portion can be subsequently protected by associating the key with authentication credentials of a user or other entity. The trusted runtime protects the encryption key based on an authentication key associated with the authentication credentials, allowing subsequent access to the encryption key only in response to the proper authentication credentials being provided.


Find Patent Forward Citations

Loading…