Claims Analysis
Total Claims: 10
Claim 1
Independent Claim
116 words
A storage device comprising: a computer readable storage medium; and a computer executable storage engine, the storage engine configured to generate a secure session key and to receive encrypted content and a corresponding encrypted content key from a host system, wherein the content key has been encrypted by the host system using the secure session key, the storage engine being further configured to decrypt the encrypted content key with a first storage engine encryption key and to write the storage-engine-encrypted content key to the storage medium, wherein the storage medium is further configured to generate the secure session key in response to verifying the authenticity of a certifying authority's digital signature provided by the host system.
Claim 2
Dependent Claim
116 words
A storage device comprising: a computer readable storage medium; and a computer executable storage engine, the storage engine configured to generate a secure session key and to receive encrypted content and a corresponding encrypted content key from a host system, wherein the content key has been encrypted by the host system using the secure session key, the storage engine being further configured to decrypt the encrypted content key with a first storage engine encryption key and to write the storage-engine-encrypted content key to the storage medium, wherein the storage medium is further configured to generate the secure session key in response to verifying the authenticity of a certifying authority's digital signature provided by the host system.
Claim 3
Dependent Claim
57 words
The storage device of claim 1 , wherein the storage engine is further configured to encrypt the secure session key using a public key provided by the host system such that the host system can recover the secure session key only by decrypting the encrypted secure session key using the private key corresponding to the public key.
Claim 4
Dependent Claim
28 words
The storage device of claim 2 , wherein the storage engine is further configured to doubly-encrypt the encrypted content using at least a second storage engine encryption key.
Claim 5
Dependent Claim
21 words
The storage device of claim 3 , wherein the second storage engine encryption key comprises a Data Encryption Standard (DES) key.
Claim 6
Dependent Claim
16 words
The storage device of claim 4 , wherein the DES key comprises a triple DES key.
Claim 7
Dependent Claim
20 words
The storage device of claim 2 , wherein the public key and the private key are elliptic curve cryptography keys.
Claim 8
Dependent Claim
22 words
The storage device of claim 1 , wherein the storage engine includes a random number generator for generating the secure session key.
Claim 9
Independent Claim
101 words
A method of writing to a storage device from a host system having a public key and a corresponding private key, comprising: encrypting a secure session key using the public key; recovering the secure session key from the encrypted secure session key using the corresponding private key; encrypting content according to a content key and commanding the storage device to write the encrypted content to a storage medium; encrypting the content key using secure session key and transmitting the encrypted content key to the storage device; and in the storage device, decrypting the encrypted content key using the secure session key.
Claim 10
Independent Claim
101 words
A method of writing to a storage device from a host system having a public key and a corresponding private key, comprising: encrypting a secure session key using the public key; recovering the secure session key from the encrypted secure session key using the corresponding private key; encrypting content according to a content key and commanding the storage device to write the encrypted content to a storage medium; encrypting the content key using secure session key and transmitting the encrypted content key to the storage device; and in the storage device, decrypting the encrypted content key using the secure session key.