Patent ID: 8347359

Claim:
A system for controlling access to sensitive data, said system comprising: a data storage device, configured for storing data and including a data storage controller, responsive to a request to access data from a client access device, for providing a request indication of said request to access data, and for providing said data only upon receiving an authorization indication from a data access control server that said client access device is authorized to access said data; the data access control server, coupled to said data storage device and to said client access device and including an encryption sentinel server, said encryption sentinel server responsive to said request indication from said data storage device, and responsive to a security indication of whether said client access device is secure, for controlling access to said data on said data storage device by said client access device; the client access device, coupled to said data storage device and to said data access control server and including a client data access controller, configured for initiating said request to access data, and responsive to said encryption sentinel server, for providing the security indication with secure status of a storage device on said client access device; and wherein said encryption sentinel server is configured to store the secure status of said client access device, including a timestamp of said status, on said data access server.