| CPC H04L 9/3278 (2013.01) [G06F 21/78 (2013.01); H04L 9/085 (2013.01)] | 20 Claims |

|
1. A method for protecting data in a storage device, the method comprising, during a key generation phase of operation:
generating, by at least one Physically Unclonable Function (PUF), a set of Data Encryption Key (DEK) responses based on a set of DEK challenges;
obtaining a set of Self-Encrypting Drive (SED) DEK secret shares based on the set of DEK responses;
obtaining additional data;
assembling at least the set of SED DEK secret shares and the additional data to create a DEK master secret;
obtaining a DEK based on the DEK master secret; and
performing at least one of encryption of data to be stored in encrypted data storage of the storage device using the DEK or decryption of data being accessed by a host from the encrypted data storage of the storage device using the DEK master secret.
|