Patent ID: 8250379
Filing Date: 2012-08-21
Classification: G06F

Abstract:
1. One or more computer-readable storage media comprising computer-executable instructions for temporarily suspending an existing encryption mechanism that is tied to a state of a computing device comprising a Trusted Platform Module (TPM), the computer-executable instructions performing steps comprising: encrypting a first key that is part of the existing encryption mechanism and which, as part of the existing encryption mechanism, was protected by the TPM such that the TPM would provide access to first key only if the state of the computing device was equivalent to a pre-defined state, the encrypting resulting in the temporary suspension of the existing encryption mechanism that is tied to the state of the computing device; storing the encrypted first key on a storage medium that is communicationally coupled to the computing device, the storage medium being external to the TPM; storing, on a storage medium that is internal to the TPM, a second key that is utilizable to decrypt the encrypted first key that is stored on the storage medium that is external to the TPM, wherein the storing is performed such that the second key can be obtained from the storage medium that is internal to the TPM independently of any particular state of the computing device; storing, with the encrypted first key, on the storage medium that is external to the TPM, an index identifying a location on the TPM's storage medium at which the second key was stored; subsequent to the storing the second key on the TPM's storage medium, requesting the second key from the TPM, the requesting specifying the index; utilizing the second key, as obtained from the TPM in response to the requesting, to decrypt the encrypted first key; and subsequent to the utilizing the second key, as obtained from the TPM, to decrypt the encrypted first key, instructing the TPM to delete the second key from the TPM's storage medium, there restoring the existing encryption mechanism by preventing access to the first key even if the encrypted first key retrieved from the storage medium external to the TPM.