Patent ID: 8510552
Filing Date: 2013-08-13
Classification: G06F,H04L,H04W

Abstract:
1. A method of encryption and key management, the method causing a computing device to perform steps comprising: generating, by the computing device, a unique file encryption key for a specified file in response to creation of the specified file, wherein the specified file is associated with a user of the computing device; encrypting the specified file on the computing device using the unique file encryption key to form an encrypted file; associating, by the computing device, a protection class with the specified file, wherein the protection class includes certain file behavior and access rights for the specified file; generating, by the computing device, a protection class key for the protection class; encrypting, by the computing device, the unique file encryption key using the protection class key to form an encrypted file encryption key; and encrypting, by the computing device, the protection class key using a user key and a device specific code in response to enabling of data protection on the device to form an encrypted protection class key, wherein the user key is based upon a passcode associated with the user, and the device specific code is a unique code associated with hardware of the computing device.