Patent ID: 8108940
Filing Date: 2012-01-31
Classification: G06F

Abstract:
1. A method for protecting user data from unauthorized access, the method comprising steps of, on a data processing system: maintaining said user data in encrypted form stored on a second storage device, said user data comprising a user's personal configuration image; when loading an operating system using an operating system loader: receiving in a first disk key transmission step from a first user system a symmetric user key that is only accessible by the data processing system if the operating system loader has been started on behalf of said first user system, wherein the symmetric user key is received sealed to a combination of the operating system loader and a user identifier corresponding to said first user system in said first disk key transmission step; accessing the symmetric user key, if the operating system loader has been started on behalf of said first user system; and decrypting in a user data decryption step said user data using the symmetric user key, maintaining said symmetric user key in a volatile memory.