Patent ID: 7545931
Filing Date: 2009-06-09
Classification: G06F,H04L

Abstract:
1. A method of encrypting data, comprising steps of: (a) employing an algorithm within a machine to automatically compute and store an invariant entropy that is specific to the machine; (b) simultaneously executing a plurality of applications, which are running on behalf of an interactive user, on top of the same runtime environment within the machine; (c) utilizing one of the plurality of applications to request a secured data storage of data generated within the machine by the requesting application; (d) extracting evidence from the requesting application, the evidence being extracted by an independent component within the runtime environment, the evidence being unique to the requesting application among applications installed in the machine; (e) generating a cryptographic key for secured data storage in the machine based at least on the invariant machine specific entropy and the evidence; and (f) using the key generated in step (e) to encrypt the data generated within the machine by the requesting application in order to prevent the encrypted data from being decrypted by any other machine; wherein the machine specific entropy is based on at least one unpredictable event associated with hardware within the machine, and wherein step (e) comprises hashing the machine specific entropy directly with the evidence.