SYSTEM AND METHOD TO REDIRECT AND UNLOCK SOFTWARE SECURE DISK DEVICES IN A HIGH LATENCY ENVIRONMENT

摘要

A software secure universal serial bus (USB) disk connected to a client may be redirected to a server. Requests to a virtual software secure USB disk may not be accessible because of network latency. For example, a client locking application may not verify required parameters before expiration of a time period. A client may be configured to unmount its file system (if present) and lock its disk stack. The server may load a virtual disk enumerator and file system stack to process transaction requests to the virtual software secure USB disk. The partition manager may create a partition associated with a hidden partition of the virtual software secure USB disk and associate a locking application in a separate virtual small partition. All requests to unlock the virtual hidden partition are processed at the server by the locking application instead of at the client which reduces the overall bandwidth.

主权项

1. A method comprising:
receiving, at a server, a disk arrival notification that a software secure universal serial bus (USB) disk has been coupled to a client; issuing a command by a proxy server to a virtual disk enumerator to create a virtual software secure disk associated with the software secure USB disk; loading a disk driver corresponding to the virtual software secure USB disk; loading a file system stack corresponding to the virtual software secure USB disk, wherein the file system stack provides file level access of the virtual software secure disk; creating a virtual hidden partition of the virtual software secure disk, wherein the virtual hidden partition is associated with a hidden partition of the software secure USB disk, and wherein access to the virtual hidden partition requires an encryption key; creating a virtual small partition of the virtual software secure disk, wherein the virtual small partition is associated with a small partition of the software secure USB disk; creating a partition, wherein the partition is associated with the virtual small partition; creating by a locking application the encryption key; unlocking the virtual hidden partition at the server by the locking application; and transmitting a request to the virtual hidden partition.