Patent ID: 9576144
Date: 2017-02-21
CPC Classifications: G06F,H04L

Claim:
1. A method of accessing data secured and encrypted using a file system manager, the method comprising: determining whether a community of interest (COI) key obtained from a security appliance matches a COI key associated with a file structure managed by the file system manager that is the subject of a file system request issued by a caller; identifying an entry included in a key bank associated with the COI key and the file structure that is the subject of the file system request, the key bank storing encrypted versions of a metadata key; decrypting the metadata key using the COI key; decrypting at least one block encryption key using the metadata key; and decrypting a block of data associated with the at least one block encryption key; wherein the metadata key is included in a metadata key entry including a first identity value and a second identity value; wherein the at least one block encryption key is included in a block encryption key entry including the second identity value and a third identity value; and wherein the third identity value comprises a portion of the block of data associated with the at least one block encryption key.