Patent ID: 8761403

Claim:
A secured data storage and recovery method, for encrypting data by using a controller of a storage device and transmitting the encrypted data to a remote device through a host, the secured data storage and recovery method comprising: obtaining a secured key and an encrypted user password of the storage device wherein the secure key is randomly generated by the host; encrypting the secured key by using the encrypted user password to generate a first private key; encrypting the encrypted user password by using the secured key to generate a second private key; encrypting data to be stored by using the secured key; transmitting the encrypted data, the first private key, and the second private key to the remote device for storage through the host; receiving an old password and a new password input by a user through the host; encrypting the old password and the new password with a hash function and transmitting the encrypted old password and the encrypted new password to the controller through the host; reading the first private key by decrypting the first private key using the encrypted old password to restore the secured key through the controller; reading the second private key by decrypting the second private key using the secured key to restore the encrypted user password through the controller; determining whether the encrypted old password matches the encrypted user password through the controller; replacing the encrypted user password with the encrypted new password to encrypt the secured key in response to the encrypted old password matches the encrypted user password; and requesting the user to input a password by the host in response to the encrypted old password does not match the encrypted user password.