Patent ID: 8181028

Claim:
A computer implemented method for secure shutdown of a user device comprising: detecting a shutdown of said user device, said user device including a key list having a first key list entry corresponding to a user private key for use in decrypting an encrypted partition storing encrypted data on said user device; determining, by a hardware processor, whether or not to securely shutdown said user device; wherein upon a determination to securely shutdown said user device, deleting said first key list entry from said key list; and permitting said shutdown of said user device to proceed; detecting a boot up of the user device, said user device including the key list; querying a user for input of at least one user credential to said user device; receiving said input of said at least one user credential; obfuscating said at least one user credential, said obfuscating generating at least one obfuscated user credential; generating a key re-provisioning request, said key re-provisioning request requesting a key re-provisioning from a key management system device and including said at least one obfuscated user credential; sending said key re-provisioning request to said key management system device; receiving a key re-provisioning response from said key management system device, said key re-provisioning response including at least a key re-provisioning password; locating a key list entry in said key list corresponding to said key re-provisioning password, said key list entry including an encrypted session key; decrypting said encrypted session key utilizing at least said key re-provisioning password; querying said user for input of at least one user password; receiving said input of said at least one user password on said user device; encrypting said decrypted session key utilizing said at least one user password; generating a new key list entry corresponding to said user private key in said key list; and permitting said boot up of said user device to proceed.