Secure data management
AssigneeRed Hat, Inc.
InventorJonathan Charles Masters
Life of this patent
Estimating the term…
Abstract
In one example a processing device can receive an indication from a software application that an encrypted communication transmitted by a remote device is stored in a memory location. In response to receiving the indication, the processing device can retrieve the encrypted communication from the memory location, decrypt the encrypted communication using a first key to determine a decrypted version of the encrypted communication, and extract a second key from the decrypted version of the encrypted communication. The second key can be different from the first key. And the second key can be configured to decrypt a set of encrypted data stored in a non-volatile memory device that is accessible to the computing device.
Claims20
A computing device comprising:
- a processing device;
- and
- a memory device including instructions that are executable by the processing device for causing the processing device to:
- receive an indication from a software application that an encrypted communication transmitted by a remote device is stored in a memory location;
- in response to receiving the indication, retrieve the encrypted communication from the memory location;
- in response to retrieving the encrypted communication, decrypt the encrypted communication using a first key to determine a decrypted version of the encrypted communication;
- and
- extract a second key from the decrypted version of the encrypted communication, the second key being different from the first key;
- and
- use the second key to decrypt a set of encrypted data stored in a non-volatile memory device that is accessible to the computing device.
A method comprising:
- receiving, by a processing device of a computing device, an indication from a software application that an encrypted communication transmitted by a remote device is stored in a memory location;
- in response to receiving the indication, retrieving, by the processing device, the encrypted communication from the memory location;
- in response to retrieving the encrypted communication, decrypting, by the processing device, the encrypted communication using a first key to determine a decrypted version of the encrypted communication;
- and
- extracting, by the processing device, a second key from the decrypted version of the encrypted communication, the second key being different from the first key;
- and
- using, by the processing device, the second key to decrypt a set of encrypted data stored in a non-volatile memory device that is accessible to the computing device.
A non-transitory computer-readable medium comprising program code that is executable by a processing device for causing the processing device to:
- receive an indication from a software application that an encrypted communication transmitted by a remote device is stored in a memory location;
- in response to receiving the indication, retrieve the encrypted communication from the memory location;
- in response to retrieving the encrypted communication, decrypt the encrypted communication using a first key to determine a decrypted version of the encrypted communication;
- and
- extract a second key from the decrypted version of the encrypted communication, the second key being different from the first key, and the second key being a decryption key that includes information usable to decrypt a set of encrypted data stored in a non-volatile memory device that is accessible to the processing device.
Dependencies are inferred from the claim text.