US 10,833,870 B2 · Cryptographic operations in an isolated collection

Abstract

Examples of the present disclosure describe systems and methods for performing cryptographic operations in an isolated collection. In an example, a user may have an associated user resource within the isolated collection, which may be associated with a cryptographic key. Other users may access the user's key from a known location to manually or automatically perform one or more cryptographic operations. In another example, a key may be generated when initiating a group conversation. The key may be encrypted for and provided to each participant using each participant's public key. Each participant may then use the cryptographic key during the conversation. A new participant may receive authorization to join the conversation from an existing participant, wherein the encrypted key of the existing participant may be decrypted and re-encrypted using the new participant's public key. The new participant may then use the re-encrypted key to participate in the conversation.

Claims20

Dependent claims

A system comprising:

at least one processor;
and
a memory storing instructions that when executed by the at least one processor perform a set of operations comprising:
accessing a data resource from an isolated collection comprising the data resource, a user resource, and a cryptographic key resource;
identifying, based on a first relationship in the isolated collection between the user resource and the data resource, the user resource associated with a user identifier of the isolated collection;
identifying, based on a second relationship in the isolated collection between the cryptographic key resource and the user resource, the cryptographic key resource associated with a cryptographic key for the user identifier;
accessing, based on the cryptographic key resource, the cryptographic key for the user identifier;
and
performing, using the cryptographic key, a cryptographic operation on the data resource.

6 more elements

A computer-implemented method, the method comprising:

generating a cryptographic key for use by a plurality of computing devices during a conversation session;
for each computing device of the plurality of computing devices:
encrypting, the cryptographic key using a public key associated with the computing device;
and
providing the encrypted cryptographic key to the computing device;
receiving, from a computing device, a message of the conversation session;
generating, using the cryptographic key, an encrypted message of the message;
storing the encrypted message in an isolated collection, wherein the encrypted message is associated with the cryptographic key by a relationship between the encrypted message and a cryptographic key resource, and wherein the cryptographic key resource is associated with the cryptographic key;
and
providing, to one or more of the plurality of computing devices, an indication of the encrypted message.

7 more elements

Dependencies are inferred from the claim text.

Cryptographic operations in an isolated collection

Life of this patent

Cryptographic operations in an isolated collection

Life of this patent

Abstract

Claims20