Secure confidential use of communication session keys
AssigneeHub Data Security Ltd.
InventorAndrey Iaremenko
Life of this patent
Estimating the term…
Abstract
At least one non-transitory computer readable medium, that at least one non-transitory computer readable medium stores instructions for (a) generating master keys by a keys security entity (KSE) that is established within a KSE; (b) generating one-time connection session keys, by the KSE, based on the master keys; (c) outputting, by the KSE, the one-time connection session keys to a Connection Security Entity (CSE) enclave in which a CSE is established, over a secure communication link; and (d) preventing access, by the KSE, to the master keys.
Claims19
A method for secure communication, the method comprises:
- generating master keys by a keys security entity (KSE) enclave that is established within a KSE;
- generating one-time connection session keys, by the KSE enclave, based on the master keys;
- outputting the one-time connection session keys to a Connection Security Entity (CSE) and/or a CSE enclave that is established within the CSE, over a secure communication link;
- and
- preventing access, by the KSE enclave, to the master keys.
A non-transitory computer readable medium for secure communication, the non-transitory computer readable medium comprises:
- generating master keys by a keys security entity (KSE) enclave that is established within a KSE;
- generating one-time connection session keys, by the KSE enclave, based on the master keys;
- outputting the one-time connection session keys to a Connection Security Entity (CSE) and/or a CSE enclave that is established within the CSE, over a secure communication link;
- and
- preventing access, by the KSE enclave, to the master keys.
A system for secure communication, the system comprises:
- a keys security entity (KSE) enclave that is established in a KSE, the KSE enclave is configured to (a) generate master keys, (b) generate one-time connection session keys, by the KSE enclave, based on the master keys, (c) output the one-time connection session keys to a Connection Security Entity (CSE) and/or a CSE enclave that is established within the CSE, over a secure communication link;
- and (d) prevent access, by the KSE enclave, to the master keys.
Dependencies are inferred from the claim text.