Secure mass storage system for computers

Claim 2

A secure mass storage system comprising, in combination: a Central Processing Unit (CPU) system; mass storage means coupled to said CPU system for storing and transferring encrypted and non-encrypted data to and from said CPU system; peripheral control logic means coupled to said mass storage means for reading said encrypted and non-encrypted data stored on said mass storage means; peripheral controller means coupled to said peripheral control logic means for accessing said mass storage means; cryptographic means coupled to said peripheral controller means for encrypting data to be stored on said mass storage means and for decrypting encrypted data stored on said mass storage means to be used by said CPU system; bus controller means coupled to said peripheral controller means and to said CPU system for selecting a bus for transferring said encrypted and non-encrypted data to and from said mass storage means; operating system means programmably stored in said CPU system for providing a command set for operation of said CPU system; user supplied key means programmably stored in said operating system means for accessing said encrypted data stored on said mass storage means; and cipher utility means programmably stored in said operating system means for providing a command set extension to said command set of said operating system means for initializing said mass storage means to store encrypted data transferred from said cryptographic means, allowing selection of a keyphrase during initialization of said mass storage means, and for allowing a user of said system to input said keyphrase to unlock said user supplied key means for accessing said encrypted data stored on said mass storage means.

Claim 3

A secure mass storage system in accordance with claim 1 wherein said operating system further comprises direct drive interface means stored in said operating system means for accessing said command set extension.

Claim 4

A secure mass storage system in accordance with claim 1 wherein said keyphrase is at least 64 bytes in length.

Claim 5

A secure mass storage system in accordance with claim 1 wherein said mass storage means is selected from the group consisting of: fixed disks, removable disks, tapes, compact disks, flash memories, opticals, and combinations thereof.

Claim 6

A secure mass storage system in accordance with claim 1 wherein said user supplied key means further comprises public key authentication means programmably stored within said operating system means for allowing multiple users to unlock said user supplied key means for accessing said encrypted data stored on said mass storage means.

Claim 7

A secure mass storage system in accordance with claim 1 further comprising commercial key escrow means programmably stored in said cipher utility means to allow an owner of said system to bypass said user supplied key means to access said encrypted data stored on said media storage means.

Claim 8

A secure mass storage system in accordance with claim 1 further comprising: media key means stored on said mass storage means for securing said encrypted data stored on said mass storage means; and controller key means stored on said peripheral controller means for allowing said peripheral controller to unlock said media key means and to read said encrypted data stored on said mass storage means after said keyphrase is verified by said peripheral control means.

Claim 9

A secure mass storage system in accordance with claim 7 wherein said mass storage means is selected from the group consisting of: fixed disks, removable disk, tapes, compact disks, flash memories, opticals, and combinations thereof.

Claim 10

A secure mass storage system in accordance with claim 7 further comprising commercial key escrow means programmably stored in said cipher utility means to allow an owner of said system to bypass said user supplied key means, said media key means and said controller key means to access said encrypted data stored on said media storage means.

Claim 11

A secure mass storage system comprising, in combination: a CPU system; mass storage means coupled to said CPU system for storing and transferring encrypted and non-encrypted data to and from said CPU system; peripheral control logic means coupled to said mass storage means for reading said encrypted and non-encrypted data stored on said mass storage means; peripheral controller means coupled to said peripheral control logic means for accessing said mass storage means; cryptographic means coupled to said peripheral controller means for encrypting data to be stored on said mass storage means and for decrypting encrypted data stored on said mass storage means to be used by said CPU system; bus controller means coupled to said peripheral controller means and to said CPU system for selecting a bus for transferring said encrypted and non-encrypted data to and from said mass storage means; operating system means programmably stored in said CPU system for providing a command set for operation of said CPU system; user supplied key means programmably stored in said operating system means for accessing said encrypted data stored on said mass storage means; cipher utility means programmably stored in said operating system means for providing a command set extension to said command set of said operating system means for initializing said mass storage means to store encrypted data transferred from said cryptographic means, allowing selection of a keyphrase during initialization of said mass storage means, and for allowing a user of said system to input said keyphrase to unlock said user supplied key means for accessing said encrypted data stored on said mass storage means; direct drive interface means stored in said operating system means for accessing said command set extension; media key means stored on said mass storage means for securing said encrypted data stored on said mass storage means; and controller key means stored on said peripheral controller means for allowing said peripheral controller to unlock said media key means and to read said encrypted data stored on said mass storage means after said keyphrase is verified by said CPU system.

Claim 12

A secure mass storage system comprising, in combination: a CPU system; mass storage means coupled to said CPU system for storing and transferring encrypted and non-encrypted data to and from said CPU system; peripheral control logic means coupled to said mass storage means for reading said encrypted and non-encrypted data stored on said mass storage means; peripheral controller means coupled to said peripheral control logic means for accessing said mass storage means; cryptographic means coupled to said peripheral controller means for encrypting data to be stored on said mass storage means and for decrypting encrypted data stored on said mass storage means to be used by said CPU system; bus controller means coupled to said peripheral controller means and to said CPU system for selecting a bus for transferring said encrypted and non-encrypted data to and from said mass storage means; operating system means programmably stored in said CPU system for providing a command set for operation of said CPU system; user supplied key means programmably stored in said operating system means for accessing said encrypted data stored on said mass storage means; cipher utility means programmably stored in said operating system means for providing a command set extension to said command set of said operating system means for initializing said mass storage means to store encrypted data transferred from said cryptographic means, allowing selection of a keyphrase during initialization of said mass storage means, and for allowing a user of said system to input said keyphrase to unlock said user supplied key means for accessing said encrypted data stored on said mass storage means; direct drive interface means stored in said operating system means for accessing said command set extension; media key means stored on said mass storage means for securing said encrypted data stored on said mass storage means; and controller key means stored on said peripheral controller means for allowing said peripheral controller to unlock said media key means and to read said encrypted data stored on said mass storage means after said keyphrase is verified by said CPU system.

Claim 13

A secure mass storage system in accordance with claim 10 wherein said mass storage means is selected from the group consisting of: fixed disks, removable disks, tapes, compact disks, and combinations thereof.

Claim 14

A secure mass storage system in accordance with claim 10 wherein said user supplied key means further comprises public key authentication means programmably stored within said operating system means for allowing multiple users to unlock said user supplied key means for accessing encrypted data stored on said mass storage means.

Claim 15

A secure mass storage system in accordance with claim 10 further comprising commercial key escrow means programmably stored in said cipher utility means to allow an owner of said system to bypass said user supplied key means, said media key means and said controller key means to access said encrypted data stored on said media storage means.

Claim 18

The method of claim 14 wherein said step of providing a secure mass storage system further comprises the step of providing direct drive interface means stored in said operating system means for accessing said command set extension.

Claim 19

The method of claim 14 wherein said step of providing a mass storage means further comprises the step of selecting a mass storage means selected from the group consisting of: fixed disks, removable disks, tapes, compact disks, and combinations thereof.

Claim 20

The method of claim 14 wherein said step of providing user supplied key means further comprises the step of providing public key authentication means programmably stored within said operating system means for allowing multiple users to unlock said user supplied key means for accessing encrypted data stored on said mass storage means.

Claim 21

A secure mass storage system in accordance with claim 14 wherein said step of providing a secure mass storage system further comprises the steps of: providing media key means stored on said mass storage means for securing said encrypted data stored on said mass storage means; and providing controller key means stored on said peripheral controller means for allowing said peripheral controller to unlock said media key means and to read said encrypted data stored on said mass storage means after said keyphrase is verified by said peripheral controller means.

Claim 22

The method of claim 18 further comprising the step of programming commercial key escrow means stored in said cipher utility means to allow an owner of said system to bypass said user supplied key means, said media key means and said controller key means to access said encrypted data stored on said media storage means.