Patent ID: 8892875
Filing Date: 2014-11-18
Classification: G06F,H04L

Abstract:
1. A method of controlling access to encrypted computer files, the method comprising: receiving key requests from a plurality of computers, each computer in the plurality of computers having an encrypted file system; performing a first integrity check in a computer in the plurality of computers, a first result of the first integrity check indicating a security posture of the computer; receiving the first result of the first integrity check over a computer network; providing a key to the computer based on the first result of the first integrity check, the key being provided to the computer over the computer network; unlocking an encrypted file system in the computer using the key; performing a second integrity check in the computer after receiving the key in the computer; receiving a second result of the second integrity check over the computer network; detecting a change in the security posture of the computer based on the second result of the second integrity check; and in response to detecting the change in the security posture of the computer, revoking the key to prevent access to the encrypted file system in the computer, wherein revoking the key to prevent access to the encrypted file system in the computer comprises simulating a disk failure.