System and method for shared data storage
View Patent ↗Systems and methods for sharing data storage on an electronic device are disclosed. A system may include a memory and a processor, an operating system executing on the electronic device, a preboot application executing on the electronic device, and a virtual drive. The operating system may be configured to mount the virtual drive and the preboot application may also be configured to mount the virtual drive.
1. A system for shared data storage on an electronic device, the system comprising:
a memory;
a processor;
an operating system configured to execute on the electronic device, the operating system residing in the memory for execution by the processor;
a preboot application configured to execute on the electronic device, the preboot application residing in the memory for execution by the processor; and
a virtual drive, wherein:
the operating system is configured to mount the virtual drive by writing a data file to the memory;
the operating system is further configured to create a memory map, the map associated with a location of the data file in the memory;
a device driver configured to execute on the electronic device, the device driver residing in the memory for execution within the operating system by the processor; and
wherein access to the virtual drive is arbitrated at least by the device driver;
a plurality of data requesting applications configured to execute on the electronic device, the plurality of data requesting applications residing in the memory for execution within the operating system by the processor, and wherein the plurality of data requesting applications access the virtual drive via the device driver;
the preboot application is configured to apply the memory map to mount the virtual drive; and
the virtual drive is bit shared between the operating system and the preboot application.
2. The system of claim 1 , wherein communication between the virtual drive and the operating system, and between the virtual drive and the preboot application occurs over an encrypted channel.
3. The system of claim 1 , wherein the virtual drive is configured to encrypt data received from the operating system.
4. The system of claim 1 , wherein the virtual drive is configured to encrypt data received from the preboot application.
5. The system of claim 1 , wherein the virtual drive is configured to securely store malware signatures.
6. The system of claim 1 , wherein operating system-level access to the virtual drive is limited to a set of preapproved applications executable by the operating system.
7. The system of claim 1 , wherein preboot-level access to the virtual drive is limited to a set of preapproved applications executable by the preboot application.
8. The system of claim 1 , wherein access to the virtual drive is limited to applications meeting a set of predetermined criteria.
9. The system of claim 1 , wherein the memory comprises a fully encrypted hard disk.
10. A method for shared data storage on an electronic device including an operating system and a preboot application, the method comprising:
mounting a virtual drive in the operating system by writing a data file to a memory;
creating a memory map, the memory map associated with a location of the data file in the memory;
mounting the virtual drive in the preboot application by applying the memory map, the virtual drive being bit shared between the operating system and the preboot application;
arbitrating access to the virtual drive through a device driver;
accessing the virtual drive by a plurality of data requesting application via the device driver.
11. The method of claim 10 , wherein communicating data to the virtual drive comprises communicating data over an encrypted channel.
12. The method of claim 10 , where in the virtual drive is configured to encrypt data received from the operating system.
13. The method of claim 10 , where in the virtual drive is configured to encrypt data received from the preboot application.
14. The method of claim 10 , where in the virtual drive is configured to securely store malware signatures.
15. The method of claim 10 , wherein operating system-level access to the virtual drive is limited to a set of preapproved applications executable by the operating system.
16. The method of claim 10 , wherein preboot-level access to the virtual drive is limited to a set of preapproved applications executable by the preboot application.
17. The method of claim 10 , wherein access to the virtual drive is limited to applications meeting a set of predetermined criteria.
18. The method of claim 10 , wherein the memory comprises a fully encrypted hard disk.
19. At least one machine readable storage medium, having instructions stored thereon, the instructions when executed on a machine, cause the machine to:
mount a virtual drive in the operating system by writing a data file to a memory;
create a memory map, the memory map associated with a location of the data file in the memory;
mount the virtual drive in the preboot application by applying the memory map, the virtual drive being bit shared between the operating system and the preboot application;
arbitrating access to the virtual drive through a device driver;
accessing the virtual drive by a plurality of data requesting application via the device driver.
20. The machine readable storage medium of claim 19 , wherein access to the virtual drive is limited to applications meeting a set of predetermined criteria.