Patent ID: 9183415
Filing Date: 2015-11-10
Classification: G06F,H04L

Abstract:
1. A method for enabling a host machine to access a portable storage drive having stored thereon an unencrypted program, an operating system, and a boot sector, the portable storage drive storing encrypted data, the encrypted data comprising the operating system, the method performed by the host machine and comprising: as part of a boot sequence being performed by the host machine, loading the program from the portable storage device to run on the host machine, the portable storage device storing encrypted keys unique to respective host machines that are particularly authorized to boot the portable storage device; receiving, by the program, a first key from a trusted platform module of the host machine and using, by the program, the first key to attempt a decryption operation to determine if the host machine is permitted access to the portable storage device, and the program: based on a determination that the host machine is permitted access to the portable storage device, responding by using the first key to obtain a decrypted key by decrypting a one of the encrypted keys retrieved from the portable storage drive that corresponds to the host machine; based on a determination that the host machine is not permitted access to the portable storage device, responding by prompting a user of the host machine to provide a credential, and responding to receiving the credential by determining that the credential is valid and in response providing the encrypted key in unencrypted form to the host machine; and performing decryption on the operating system according to the key received from the portable storage device and attempting to boot, as part of the boot sequence, correspondingly decrypted executable code of the operating system from the portable storage device.