Patent ID: 8505075

Claim:
A method for an administrator of an enterprise to recover a user secure storage device in conjunction with a third-party service without the administrator knowing a user secure storage device password, the method comprising: communicatively coupling an administrator secure storage device with a host computer; communicatively coupling the user secure storage device with the host computer; authenticating the administrator secure storage device to the third-party service; causing one or more decryptions on an encrypted portion of data stored in a recovery box on the user secure storage device, the one or more decryptions performed with an enterprise private key generated by the third-party service, with a shared administrator private key generated by the administrator secure storage device, and with a user key generated by the user secure storage device to produce information associated with the user secure storage device password; and logging the administrator into the user secure storage device using the information associated with user secure storage device password without the administrator knowing the user secure storage device password.