Patent ID: 8464354

Claim:
A method of transferring data between a computer and a mobile storage device, the method comprising: generating a cryptographic key; generating a security domain secret, the security domain secret being a secret associated with a security domain, the security domain defining a set of objects that are protected by the cryptographic key and a set of computers for accessing the protected objects; provisioning a mobile storage device as one of the set of objects within the security domain by: encrypting the cryptographic key using a password and the security domain secret, and storing the encrypted cryptographic key on the mobile storage device; provisioning a computer by storing the security domain secret in a memory device on the computer; coupling the mobile storage device to an interface of the computer; and performing a data transfer by: decrypting the cryptographic key with the password and the security domain secret; performing a cryptographic operation on data using the decrypted cryptographic key; and transferring the data between the mobile storage device and the computer.