Patent ID: 9489528
Filing Date: 2016-11-08
CPC Classification: G06F,H04L

Claim Text:
1. A method for improving protection of data on a computing device, the method comprising: determining, by a key manager executing on the computing device, that a current recovery key associated with unlocking an encrypted volume has been disclosed, the encrypted volume being separately accessible with either the current recovery key or with a current encryption key that differs from the current recovery key; generating, by the key manager, a new recovery key based on the determining; storing, by the key manager, the new recovery key on a local store of the computing device, wherein the computing device is communicationally connected to a storage device that comprises the encrypted volume; deleting, by the key manager, from the local store, at least one recovery key associated with the encrypted volume that is older than the new recovery key; sending, from the key manager, a message that adds the new recovery key to a database of a recovery store external to the computing device, the recovery store including recovery keys usable to unlock corresponding encrypted volumes if access to the corresponding encrypted volumes is denied or compromised; and receiving, at the computing device, confirmation that the new recovery key has been added to the database.