Patent ID: 8572389
Filing Date: 2013-10-29
Classification: G06F,H04L

Abstract:
1. A method of protecting master transport encryption keys stored on a first computing device, wherein at least one master transport encryption key is used to secure confidentiality of data communications between the first computing device and a second computing device, wherein data to be stored on the first computing device is encryptable using a content protection key when a content protection mode is enabled on the first computing device, wherein the method comprises, at the first computing device: generating a copy of a single grand master encryption key in decrypted form; encrypting each individual encryption key of the at least one master transport encryption key using the grand master encryption key; storing each individual encryption key encrypted using the grand master encryption key in a non-volatile store; storing the copy of the single grand master encryption key in decrypted form in a volatile store; and when the first computing device is locked using the device password to prevent unauthorized use thereof while the content protection mode is enabled, retaining the copy of the single grand master encryption key in decrypted form in the volatile store for use in decrypting at least one of the individual encryption keys, encrypted using the grand master encryption key, to decrypt data received at the first computing device from the second computing device while the first computing device is locked.