Method of encrypting and decrypting data stored on a storage device using an embedded encryption/decryption means
View Patent ↗A method of encrypting data is provided that uses a medium key retrieved from a storage medium. The medium key is combined with another key to generate a combination key. Content is encrypted according to the combination key and written to the storage medium.
1. A method of decrypting data stored on a storage medium using an encryption/decryption core embedded within an integrated circuit in a data storage engine, the storage medium including a first key, comprising:
generating a pseudo-random number within the integrated circuit using a seed stored within a non-volatile memory external to the integrated circuit to form an internal key, wherein the internal key is not transmitted outside of the integrated circuit;
decrypting an encrypted first key stored on the storage medium using the internal key;
within the integrated circuit, generating a combination key based upon the decrypted first key and the internal key;
within the encryption/decryption core, decrypting an encrypted file directory stored on the storage medium;
using the decrypted file directory to locate a file stored on the storage medium; and
within the encryption/decryption core, decrypting data from the file stored on the storage medium with the combination key.
2. The method of claim 1 , wherein the combination key is a DES key.
3. The method of claim 1 , wherein the pseudo-random number is generated using a feedback shift register.
4. The method of claim 1 , wherein using the decrypted file directory to locate a file stored on the storage medium comprises decrypting a file pointer between the file directory and the file using the combination key.
5. A method of decrypting data stored on a storage medium using an encryption/decryption core embedded within an integrated circuit in a data storage engine, the storage medium including a first key, comprising:
generating a pseudo-random number within the integrated circuit using a seed stored within the integrated circuit to form an internal key, wherein the internal key is not transmitted outside of the integrated circuit;
decrypting an encrypted first key stored on the storage medium using the internal key;
within the integrated circuit, generating a combination key based upon the decrypted first key and the internal key;
within the encryption/decryption core, decrypting an encrypted file directory stored on the storage medium;
using the decrypted file directory to locate a file stored on the storage medium; and
within the encryption/decryption core, decrypting data from the file stored on the storage medium with the combination key.
6. The method of claim 5 , wherein using the decrypted file directory to locate a file stored on the storage medium comprises decrypting a file pointer between the file directory and the file using the combination key.