Hierarchical data access techniques using derived cryptographic material

A computer-implemented method, comprising:

• obtaining one or more encrypted data items from a data store;
• obtaining one or more metadata items for individual encrypted data items of the one or more encrypted data items from the data store;
• obtaining a plurality of keys, the obtained keys of the plurality of keys being based at least in part on an information set for the plurality of keys and at least one other key distinct from the plurality of keys;
• for individual encrypted data items of the one or more data encrypted items, determining a key from the plurality of keys based at least in part on the one or more metadata items;
• determining, based at least in part on the one or more metadata items for the individual encrypted data items, a set of security parameters;
• calculating, based at least in part on the set of security parameters and the key, a decryption key;
• and
• decrypting the one or more encrypted data items based at least in part on the decryption key.

A system, comprising:

• one or more processors;
• and
• memory including instructions that, when executed by one or more processors of a computer system, cause the computer system to at least:
• obtain a plurality of keys, the plurality of keys comprising at least a first key and a second key, the first key and the second key being obtained based at least in part on an information set for the plurality of keys and at least one other key distinct from the plurality of keys;
• compute, based at least in part on information derived based at least in part on the obtained plurality of keys, a cryptographic key;
• and
• cause one or more cryptographic operations to be performed using the cryptographic key.