Method and apparatus for providing seamless file system encryption from a pre-boot environment into a firmware interface aware operating system

摘要

Methods and apparatus for providing seamless functionality in a computer are disclosed. For example, an encrypted file system manager is included to layer an encoded File Allocation Table on top of a disk and to pass to the operating system an Embedded Root Key to provide access to an encrypted Firmware Interface System Partition.

主权项

1. A method for providing a file system encryption in a computer system with a firmware interface comprising:
determining if a pre-boot access request to an encrypted system is from a trusted source; allowing the firmware interface to use a key to access the encrypted system in response to the pre-boot access request, if the pre-boot access request is from a trusted source; passing the key to an operating system (OS) of the computer system, for continuing use of the key by the OS during runtime; determining if a runtime access request is from a trusted source; and allowing the OS to use the key to access the encrypted system corresponding to the runtime access request, if the runtime access request is from a trusted source, where the encrypted system has remained encrypted during runtime.