Patent ID: 9049010
Filing Date: 2015-06-02
Classification: G06F,H04L,H04W

Abstract:
1. A portable encryption device in which data access is controlled by an encryption key, comprising: an enclosure for the device providing a portable form factor, and a cryptographic processor within the enclosure for (i) splitting the encryption key into N shares, (ii) shrouding each of the N shares with one or more external secrets, where one of the external secrets is a network authorization code which has been generated and distributed to a community of interest through an out-of-band distribution mechanism, (iii) designating one or more of the N shares as enabling, provided that at least one of the one or more so designated enabling shares has been shrouded with the network authorization code, and (iv) reconstituting the encryption key from K of the N shares, where K<N and at least one or more of the K shares is enabling.