IP Library Granted Patent US 10,049,207
Granted Patent B2
US 10,049,207 · App. 15/399,779 · Granted Aug 14, 2018

Methods of operating storage systems including encrypting a key salt

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,049,207
App. No.
15/399,779
Granted
Aug 14, 2018
Kind
B2
Abstract

A method of operating a storage system includes using the device driver to combine a password, the key salt, and the number of iterations to generate a primary key, using the device driver to generate a key schedule from the primary key, receiving an encrypted master key at the device driver, and using the device driver to decrypt the encrypted master key with the key schedule.

Claims (44)

1. A method of operating a storage system, comprising:

receiving a password at a device driver of the storage system from a host of the storage system, wherein the host is in communication with a removable storage device of the storage system through the device driver, and wherein the device driver is configured to enable a software program of the host to communicate to the removable storage device;

using the device driver to combine the password, a key salt, and a number of iterations to generate a primary key;

using the device driver to generate a key schedule from the primary key;

receiving an encrypted master key at the device driver from the removable storage device; and

using the device driver to decrypt the encrypted master key with the key schedule.

2. The method of claim 1 , wherein using the device driver to combine the password, the key salt, and the number of iterations comprises the device driver using an exclusive “OR” or Boolean functions.

3. The method of claim 1 , further comprising storing a portion of the primary key in a secure storage area of the removable storage device.

4. The method of claim 1 , wherein receiving the encrypted master key at the device driver from the removable storage device comprises receiving the encrypted master key at the device driver from a secure area of the removable storage device.

5. The method of claim 1 , wherein the primary key is used by the device driver to determine whether a user is allowed to change the password.

6. The method of claim 5 , wherein the primary key being used by the device driver to determine whether the user is allowed to change the password comprises using the device driver to determine whether a portion of the primary key matches a portion of a primary key that is stored in a secure storage area of the removable storage device.

7. The method of claim 6 , further comprising allowing the user to change the password when the portion of the primary key matches the portion of the primary key that is stored in the secure storage area of the removable storage device.

8. The method of claim 1 , further comprising using the device driver to compare a portion of the primary key to a portion of a primary key that is stored in a secure storage area of the removable storage device before using the device driver to generate the key schedule from the primary key.

9. The method of claim 8 , further comprising using the device driver to generate the key schedule from the primary key only when the portion of the primary key matches the portion of the primary key that is stored in the secure storage area of the removable storage device.

10. The method of claim 8 , wherein the secure storage area of the removable storage device is only accessible and/or readable by use of vendor unique commands.

11. The method of claim 1 , wherein the removable storage device comprises a read only master boot record.

12. The method of claim 1 , wherein the password is an old password, and further comprising using the device driver to combine the decrypted master key with a new password.

13. The method of claim 1 , wherein the password is an old password, and further comprising using the device driver to encrypt the decrypted master key in response to receiving a new password at the host.

14. The method of claim 13 , wherein the key salt is a first key salt, the primary key is a first primary key, and the key schedule is a first key schedule, and wherein using the device driver to encrypt the decrypted master key in response to receiving a new password at the host comprises:

using the device driver to combine the new password, a second key salt, and the number of iterations to generate a second primary key;

using the device driver to generate a second key schedule from the second primary key; and

using the device driver to encrypt the decrypted master key with the second key schedule.

15. A method of operating a storage system, comprising:

receiving a password at a device driver of the storage system from a host of the storage system, wherein the host is in communication with a removable storage device of the storage system through the device driver, and wherein the device driver is configured to enable a software program of the host to communicate to the removable storage device;

using the device driver to combine the password, a key salt, and a number of iterations to generate a first primary key;

using the device driver to determine whether a portion of the first primary key matches a portion of a second primary key stored in a secure storage area of the removable storage device;

using the device driver to generate a key schedule from the first primary key in response to the portion of the first primary key matching the portion of the second primary key;

receiving an encrypted master key at the device driver from the removable storage device; and

using the device driver to decrypt the encrypted master key with the key schedule.

16. The method of claim 15 , wherein using the device driver to combine the password, the key salt, and the number of iteration comprises the device driver using an exclusive “OR” or Boolean functions.

17. The method of claim 15 , wherein the password is an old password, and further comprising using the device driver to combine a new password with the decrypted master key to encrypt the decrypted master key.

18. A method of operating a storage system, comprising:

receiving an old password at a device driver of the storage system from a host of the storage system, wherein the host is in communication with a removable storage device of the storage system through the device driver, and wherein the device driver is configured to enable a software program of the host to communicate to the removable storage device;

using the device driver to combine the old password, a first key salt, and a number of iterations to generate a first primary key;

using the device driver to determine whether a portion of the first primary key matches a portion of a second primary key stored in a secure storage area of the storage device;

using the device driver to generate a first key schedule from the first primary key in response to the portion of the first primary key matching the portion of the second primary key;

receiving an encrypted master key at the device driver from the removable storage device;

using the device driver to decrypt the master key with the first key schedule;

receiving a new pass word at the device driver;

using the device driver to combine the new password, a second key salt, and the number of iterations to generate a third primary key;

using the device driver to generate a second key schedule from the third primary key; and

using the device driver to encrypt the decrypted master key with the second key schedule.

19. The method of claim 18 , wherein the secure storage area of the removable storage device is only accessible and/or readable by use of vendor unique commands.

20. The method of claim 18 , wherein the removable storage device comprises a read only master boot record.

Assignments (4)
RELEASE OF SECURITY INTEREST Recorded Nov 12, 2019
From: JPMORGAN CHASE BANK, N.A., AS COLLATERAL AGENT
To: MICRON TECHNOLOGY, INC.; MICRON SEMICONDUCTOR PRODUCTS, INC.
Reel/Frame 051028/0001 →
RELEASE OF SECURITY INTEREST Recorded Oct 9, 2019
From: MORGAN STANLEY SENIOR FUNDING, INC., AS COLLATERAL AGENT
To: MICRON TECHNOLOGY, INC.
Reel/Frame 050695/0825 →
SECURITY INTEREST Recorded Jul 13, 2018
From: MICRON TECHNOLOGY, INC.; MICRON SEMICONDUCTOR PRODUCTS, INC.
To: JPMORGAN CHASE BANK, N.A., AS COLLATERAL AGENT
Reel/Frame 047540/0001 →
SUPPLEMENT NO. 3 TO PATENT SECURITY AGREEMENT Recorded Feb 10, 2017
From: MICRON TECHNOLOGY, INC.
To: MORGAN STANLEY SENIOR FUNDING, INC.
Reel/Frame 041675/0105 →