초록 ▼

A data server platform includes a security file system layer interposed between the platform operating system kernel and file system. The secure file system layer is structured to implement a file access control function that selectively constrains data transfer operations initiated through the ope

A data server platform includes a security file system layer interposed between the platform operating system kernel and file system. The secure file system layer is structured to implement a file access control function that selectively constrains data transfer operations initiated through the operating system kernel by an application program to transfer file data through the file system with respect to a persistent data store. A file access controller, implemented independent of the operating system kernel, is coupled to the security file system layer and supports the file access control function by defining permitted file data transfers through the file system. Management of the file access controller separate from the data server platform ensures that any security breach of the platform operating system kernel cannot compromise the function of the security file system layer.

대표청구항 ▼

The invention claimed is: 1. A method of securing the transfer of persistently stored data between a computer system and a persistent data store, wherein said computer system includes a processor supporting the execution of an operating system kernel and a file system to transfer data with respect

The invention claimed is: 1. A method of securing the transfer of persistently stored data between a computer system and a persistent data store, wherein said computer system includes a processor supporting the execution of an operating system kernel and a file system to transfer data with respect to said persistent data store, said method comprising the steps of: a) associating user session information with data transfer requests provided from said operating system kernel; b) providing said user session information and said data transfer requests to a security processor system, external to and secured independent of said computer system, to determine permitted data transfer operations; c) routing, between said operating system and said file system, the persistently stored data corresponding to said permitted data transfer operations exclusively through said independent security processor system d) acquiring said user session information through said operating system kernel; and e) decrypting, by said independent security processor system, persistently stored data retrieved through said file system, said step of decrypting utilizing decryption keys identified only by reference by said data transfer requests. 2. The method of claim 1 wherein said step of decrypting includes retrieving a predetermined decryption key in correspondence with a predetermined data transfer request, wherein said predetermined decryption key is retrieved independent of said computer system. 3. The method of claim 2 wherein, in performance of said step of decrypting, said predetermined decryption key is held by said security processor system inaccessible from said computer system. 4. A method of securing persistently stored file data stored by a persistent storage device and accessible through a computer server system including a processor, an operating system executable by said processor including an operating system kernel providing a first file system interface and a second file system interface to said persistent storage device, said method comprising the steps of: a) coupling an independently operating encryption processor server system supporting the transparent encryption and decryption of persistent file data to said computer server system through a defined communications channel; b) associating session information obtained through said operating system kernel with a predetermined persistent file data transfer request identifying predetermined persistent file data; c) providing said predetermined persistent file data transfer request and said session information to said independently operating encryption processor server system through said defined communications channel; d) routing said predetermined persistent file data as transferred between said first and second file system interfaces through said independently operating encryption processor server system e) maintaining inaccessible, by said independently operating encryption processor server system from said computer server system through said defined communications channel, an encryption key associated with said predetermined persistent file data transfer request; and f) determining, by said independently operating encryption processor server system, said encryption key from said predetermined persistent file data transfer request, wherein said step of determining predetermines the access authorization of said predetermined persistent file data transfer request with respect to said session information and an access policy store maintained by said independently operating encryption processor server system. 5. The method of claim 4 wherein said step of maintaining further maintains inaccessible, by said independently operating encryption processor server system from said computer server system through said defined communications channel, said access policy store. 6. The method of claim 5 wherein said step of maintaining inaccessible prevents access to said encryption key and said access policy store through said defined communications channel independent of a security breach of said computer server system. 7. A computer system providing for the secure transfer of persistently stored data with respect to a persistent data store, said computer system comprising: a) a secured computer system including a memory, a data persistence interface coupleable to a persistent data store, a network security interface, and a processor coupled to said memory, to said data persistence interface, and to said network security interface, said processor being operative to execute, within said memory, an operating system kernel, a file system coupled to said data persistence interface to transfer secured data with respect to said persistent data store, and a security interposer layer coupled between said operating system kernel and said file system, wherein execution of said security interposer layer is operative to associate user session information with data transfer requests provided from said operating system kernel and to transfer said secured data between said operating system kernel and said file system; and b) a security processor system external to and secured independent of said secured computer system, said security processor system including a policy data store providing for the storage of data operation policies and corresponding data cipher keys, wherein said security processor system is coupleable to said network security interface to interoperate with said secured computer system to determine permitted data transfer operations through said interposer layer, including decryption and transfer of said secured data retrieved through said file system, utilizing cipher keys identified only by reference by said data transfer and said user session information. 8. The computer system of claim 7 wherein decryption and transfer of said secured data includes retrieving a predetermined cipher key in correspondence with a predetermined data transfer request, wherein said predetermined cipher key is retrieved independent of said operating system kernel and said file system. 9. The method of claim 8 wherein, in decryption and transfer of said secured data, said predetermined cipher key is held inaccessible from said operating system kernel and said file system. 10. The computer system of claim 9 wherein said predetermined cipher key is held inaccessible by said security processor system through said network security interface independent of a security breach of said secured computer server system.