Patent ID: 8204233

Claim:
A computer-implemented method of remotely administering data encryption in a computing system that includes an authentication server and at least one client computer that includes a communication component and a data storage device for storing encrypted data, the computer-implemented method comprising: requesting, by the communication component, communication with the authentication server when start up of the client computer is initiated; determining, by the authentication server, if the client computer on which the encrypted data is stored is an authorized client computer; passing an encrypted data storage key for decrypting the encrypted data, from the communication component of the client computer to the authentication server if the client computer is authorized; not allowing, by the communication component, the start up of the client computer to complete successfully if the client computer is not authorized or communication with the authentication server cannot be established; decrypting the encrypted data storage key by the authentication server; passing, by the authentication server, the decrypted data storage key to the client computer; and using the decrypted data storage key, by the client computer, to access the encrypted data on the data storage device.