Patent ID: 7565532
Filing Date: 2009-07-21
Classification: G06F,H04L

Abstract:
1. A method of securing the transfer of persistently stored data between a computer system and a persistent data store, wherein said computer system includes a processor supporting the execution of an operating system kernel and a file system to transfer data with respect to said persistent data store, said method comprising the steps of: a) associating user session information with data transfer requests provided from said operating system kernel; b) providing said user session information and said data transfer requests to a security processor system, external to and secured independent of said computer system, to determine permitted data transfer operations; c) routing, between said operating system and said file system, the persistently stored data corresponding to said permitted data transfer operations exclusively through said independent security processor system d) acquiring said user session information through said operating system kernel; and e) decrypting, by said independent security processor system, persistently stored data retrieved through said file system, said step of decrypting utilizing decryption keys identified only by reference by said data transfer requests.