Method and apparatus for securing computer mass storage data

摘要

In general, embodiments of the invention include methods and apparatuses for securely storing computer system data. Embodiments of the invention encrypt and decrypt SATA data transparently to software layers. That makes it unnecessary to make any software modifications to the file system, device drivers, operating system, or application. Encryption key management is performed either remotely on a centralized Remote Management System or locally. Embodiments of the invention implement background disk backups using snapshots. Additional security features that are included in embodiments of the invention include virus scanning, a virtual/network drive, a RAM drive and a port selector that provides prioritized and/or background access to SATA mass storage to a secure subsystem.

主权项

1. A system for securely storing computer system data comprising:
a mass storage device; a host processor system that executes an operating system and applications that produce and use host data stored on the mass storage device; and a secure subsystem that performs one or more security functions on the host data transparently to and independently from the host processor, and wherein the secure subsystem further produces and uses secure data stored on the mass storage device, and wherein the secure subsystem controls access to the mass storage device such that the host processor system is unable to access the secure data, wherein the host processor system includes a SATA host and the mass storage device comprises a SATA device, and wherein the secure subsystem includes a SATA complex that is interposed between the SATA host of the host processor system and the SATA device comprising the mass storage device, wherein the SATA complex includes a SATA device core that communicates with the SATA host of the host processor system.