Patent ID: 9672333
Date: 2017-06-06
CPC Classifications: G06F,H04L

Claim:
1. A computer-implemented method for authenticating access to encrypted content on a storage device, the method comprising: receiving a pass code from a host over an authenticated communication channel between a host and the storage device, the storage device having stored therein encrypted content, wherein the encrypted content is encrypted according to a content encryption key, the storage device including an encrypted version of the content encryption key and an encrypted version of a content-key encryption key, and wherein the encrypted version of the content encryption key is encrypted according to the content key encryption key; verifying an authenticity of the pass code and obtaining a derived key by hashing the pass code if the pass code is authentic, wherein the encrypted version of the content-key encryption key is encrypted according to the derived key; decrypting the encrypted version of the content-key encryption key using the derived key to recover the content-key encryption key; decrypting the encrypted content encryption key using the recovered content-key encryption key to recover the content encryption key; and decrypting the encrypted content using the content encryption key.