Patent ID: 8412934
Filing Date: 2013-04-02
Classification: G06F,H04L

Abstract:
1. A non-transitory computer-readable storage medium storing instructions which, when executed by a computing device, cause the computing device to back up a computing device, the instructions comprising: receiving, from a second device, a backup ticket containing encryption keys encrypted with a backup secret at a first device having an encrypted file system, and the backup secret, wherein each file in the file system is encrypted with a unique file encryption key, each file encryption key is encrypted with a class encryption key, and each class encryption key is encrypted with an additional encryption key, and the class encryption key corresponds to an assigned protection class that allows access rights to be associated with the file; retrieving an escrow key bag on the first device, wherein the escrow key bag contains protection class keys for the plurality of protection classes encrypted with the backup ticket and a unique device specific code associated with the first device; decrypting the protection class keys on the first device using the backup ticket and the device specific code associated with the first device; generating a backup key bag containing backup protection class keys on the first device; selecting a set of encrypted files on the first device to back up; decrypting file encryption keys corresponding to the selected set of encrypted files on the first device with the decrypted protection class keys from the escrow key bag; re-encrypting the file encryption keys with the backup protection class keys on the first device; and transferring from the first device to the second device the selected set of encrypted files, the backup key bag, and metadata associated with the selected set of encrypted files.