# US 11,444,763 B2 · Secure storage of anchor passphrase for DBMS > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,444,763 B2 - Document ID: US11444763B2 - Status: Granted - Kind: B2 - Application number: 16/875,161 - Filed: 2020-05-15 - Published: 2021-11-18 - Granted: 2022-09-13 - Earliest claimed: 2020-05-15 - Assignees: Sap SE - Applicants: Sap SE - Inventors: Stefan Voss; Martin Brunzema; Henrik Hempelmann; Benedikt Klus; Anne Roessiger - Web page: https://patentgrep.com/patent/US11444763B2 ## CPC - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - G06F 11/1458: {Management of the backup or restore process} - G06F 11/1469: {Backup restoration techniques} - G06F 16/27: Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 2201/80: Database-specific techniques - G06F 2201/82: Solving problems relating to consistency - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system and method to receive, by a database service from an encryption service of a database provider in a cloud environment, an encryption key passphrase stored in a secure storage separate and distinct from a database persistence and object store of the database service, the encryption key passphrase used as a key to encrypt and decrypt a key storage of the database service that stores one or more keys used by the database service; and to use the encryption key passphrase by a recovery service of the database provider in the cloud environment to recover the database service and its associated key storage. ## Claims ### Claim 1 A system comprising: a memory storing processor-executable program code; and a processor to execute the processor-executable program code in order to cause the system to: receive, by a database service from an encryption service of a database provider in a cloud environment, an encryption key passphrase; encrypt a key storage managed by the database service using the encryption key passphrase, the key storage storing one or more encryption keys used by the database service; store an encrypted backup of the key storage in an object store of the database service; and store the passphrase in a secure storage that is separate and distinct from the object store of the database service and a data persistence of the database service. ### Claim 2 (depends on 1) The system of claim 1, wherein the data persistence of the database service is an object store to store data backups of the database service. ### Claim 3 (depends on 1) The system of claim 1, wherein the object store storing the encrypted backup of the key storage further stores encrypted backups of the database service. ### Claim 4 (depends on 1) The system of claim 1, wherein the storing of the encrypted backup of the key storage in the object store of the database service is performed in response to an initialization of the database service. ### Claim 5 (depends on 1) The system of claim 1, wherein the secure storage storing the encryption key passphrase is inaccessible by the database service. ### Claim 6 (depends on 1) The system of claim 1, wherein the processor is further configured to execute the processor-executable program code in order to cause the system to: initialize, in response to a request to recreate the database service, a new instance of the database service; receive, by the new database service instance from a recovery service of the database provider, the encryption key passphrase; access, using the encryption key passphrase received from the recovery service, the encrypted backup of the key storage in the object store of the database service; perform, by the new database service instance, a recovery of the key storage using the encrypted backup of the key storage; and perform, by the new database service instance, a recovery of data backups and log backups using the one or more encryption keys in the recovered key storage. ### Claim 7 (depends on 6) The system of claim 6, wherein the encryption key passphrase is used once by the new instance of the database service to access the encrypted backup of the key storage. ### Claim 8 A computer-implemented method, the method comprising: receiving, by a database service from an encryption service of a database provider in a cloud environment, an encryption key passphrase; encrypting a key storage managed by the database service using the encryption key passphrase, the key storage storing one or more encryption keys used by the database service; storing an encrypted backup of the key storage in an object store of the database service; and storing the passphrase in a secure storage that is separate and distinct from the object store of the database service and a data persistence of the database service. ### Claim 9 (depends on 8) The method of claim 8, wherein the data persistence of the database service is an object store to store data backups of the database service. ### Claim 10 (depends on 8) The method of claim 8, wherein the object store storing the encrypted backup of the key storage further stores encrypted backups of the database service. ### Claim 11 (depends on 8) The method of claim 8, wherein the storing of the encrypted backup of the key storage in the object store of the database service is performed in response to an initialization of the database service. ### Claim 12 (depends on 8) The method of claim 8, wherein the secure storage storing the encryption key passphrase is inaccessible by the database service. ### Claim 13 (depends on 8) The method of claim 8, further comprising: initializing, in response to a request to recreate the database service, a new instance of the database service; receiving, by the new database service instance from a recovery service of the database provider, the encryption key passphrase; accessing, using the encryption key passphrase received from the recovery service, the encrypted backup of the key storage in the object store of the database service; performing, by the new database service instance, a recovery of the key storage using the encrypted backup of the key storage; and performing, by the new database service instance, a recovery of data backups and log backups using the one or more encryption keys in the recovered key storage. ### Claim 14 (depends on 13) The method of claim 13, wherein the encryption key passphrase is used once by the new instance of the database service to access the encrypted backup of the key storage. ### Claim 15 A non-transitory, computer readable medium storing instructions, which when executed by at least one processor cause a computer to perform a method comprising: receiving, by a database service from an encryption service of a database provider in a cloud environment, an encryption key passphrase; encrypting a key storage managed by the database service using the encryption key passphrase, the key storage storing one or more encryption keys used by the database service; storing an encrypted backup of the key storage in an object store of the database service; and storing the passphrase in a secure storage that is separate and distinct from the object store of the database service and a data persistence of the database service. ### Claim 16 (depends on 15) The medium of claim 15, wherein the data persistence of the database service is an object store to store data backups of the database service. ### Claim 17 (depends on 15) The medium of claim 15, wherein the storing of the encrypted backup of the key storage in the object store of the database service is performed in response to an initialization of the database service. ### Claim 18 (depends on 15) The medium of claim 15, wherein the secure storage storing the encryption key passphrase is inaccessible by the database service. ### Claim 19 (depends on 15) The medium of claim 15 storing instructions, which when executed by at least one processor cause a computer to perform a method further comprising: initializing, in response to a request to recreate the database service, a new instance of the database service; receiving, by the new database service instance from a recovery service of the database provider, the encryption key passphrase; accessing, using the encryption key passphrase received from the recovery service, the encrypted backup of the key storage in the object store of the database service; performing, by the new database service instance, a recovery of the key storage using the encrypted backup of the key storage; and performing, by the new database service instance, a recovery of data backups and log backups using the one or more encryption keys in the recovered key storage. ### Claim 20 (depends on 19) The medium of claim 19, wherein the encryption key passphrase is used once by the new instance of the database service to access the encrypted backup of the key storage.