US 11,240,022 B1 · Passive encryption rotation keys

Abstract

In one arrangement, a method for a key management server to manage cryptographic key rotation comprises rotating, by the key management server, an initial symmetric key based on a first rotation schedule. Rotating the initial symmetric key comprises rotating bits of the initial symmetric key to create a rotated key, the rotated key being different from the initial symmetric key. The method further comprises enciphering, by the key management server using the rotated key, data sent to a first client server. In another arrangement, a method for a client server to manage cryptographic key rotation comprises rotating, by the client server, an initial symmetric key based on a schedule. The method further comprises deciphering, by the client server, data sent from a key management server using the rotated key and providing the deciphered data to a user.

Claims17

Dependent claims

A method for a key management server to manage cryptographic key rotation, the method comprising:

rotating, by the key management server, an initial symmetric key based on a first schedule, the first schedule being generated by the key management server and provided to a first client server;
wherein rotating the initial symmetric key comprises shifting bits of the initial symmetric key in a bitwise shifting process to create a rotated key, the rotated key being different from the initial symmetric key, the bitwise shifting process comprising:
removing a most significant bits portion;
shifting a least significant bits portion to replace the most significant bits portion;
and
adding a new least significant bits portion such that the rotated key is the same length as the initial symmetric key, the new least significant bits portion being generated by a hash function of the initial symmetric key.

3 more elements

A method for a client server to manage cryptographic key rotation, the method comprising:

rotating, by the client server, an initial symmetric key based on a schedule, wherein rotating the initial symmetric key comprises shifting bits of the initial symmetric key in a bitwise shifting process to create a rotated key, the rotated key being different from the initial symmetric key, the bitwise shifting process comprising:
removing a most significant bits portion;
shifting a least significant bits portion to replace the most significant bits portion;
and
adding a new least significant bits portion such that the rotated key is the same length as the initial symmetric key, the new least significant bits portion being generated by a hash function of the initial symmetric key;
deciphering, by the client server, data sent from a key management server using the rotated key;
and
providing, to a user, the deciphered data.

5 more elements

Dependencies are inferred from the claim text.

Passive encryption rotation keys

Life of this patent

Passive encryption rotation keys

Life of this patent

Abstract

Claims17