Patent ID: 8103883

Claim:
A method comprising: controlling access to data stored on a plurality of storage devices associated with a first platform by: authenticating a user to access the first platform, wherein the first platform comprises a first storage device of the plurality of storage devices, a second storage device of the plurality of storage devices, chipset encryption hardware, and a memory, first data stored on the first storage device are encrypted by the chipset encryption hardware using a first encryption key, second data stored on the second storage device are encrypted by another encryption mechanism and not by the chipset encryption hardware, and the second data are encrypted using a second encryption key; decrypting the first data stored on the first storage device; obtaining a container encryption key for a container stored in the memory; decrypting the container stored in the memory using the container encryption key, wherein the container comprises the second encryption key; using the second encryption key to decrypt the second data stored on the second storage device; allowing the user to access the first data and the second data; wrapping the first encryption key with a platform-independent token to produce a migration key; storing the migration key on the first platform; storing the platform-independent token in a secure location that is not on the first platform; migrating the first storage device to a second platform; and decrypting the first data on the second platform using the platform-independent token and the migration key.