Patent ID: 8799407

Claim:
A non-transitory computer-readable storage medium with an executable program stored thereon for enabling a storage system having a secure repository for storage of files, wherein the secure repository is associated with information associated with a security template of a user for authentication of the user's identity, wherein the program instructs at least one processor to perform the following steps: receive information associated with an authentication template of the user to access the secure repository during a session; compare the information associated with the authentication template with the information associated with the security template; upon the information associated with the authentication template correlating with the information associated with the security template, generate a key to use for encrypting at least one file stored within the secure repository during the session or decrypting at least one file removed from the secure repository during the session; receive an instruction from the user to transfer at least one user file to or from the secure repository; if the received instruction is to transfer the user file to the secure repository, encrypt the user file using said generated key and store the user file in the secure repository, wherein each user file stored in the secure repository is separately encrypted, wherein the user file is encrypted and stored in the secure repository automatically upon receipt of the user's instruction to transfer the user file to the secure repository and with no further action from the user, such that the user does not have to request or prompt encryption of the file; if the received instruction is to transfer the user file from the secure repository, decrypt the user file using said generated key and remove the user file from the secure repository, wherein the user file is decrypted and removed from the secure repository automatically upon receipt of the user's instruction to transfer the user file from the secure repository and with no further action from the user, such that the user does not have to request or prompt decryption of the file; terminate the session upon an event; and destroy the key in association with terminating the session, such that only the information associated with said security template is preserved.