Systems and methods for encrypted content management

A method comprising:

• receiving, with an encrypted content management module, a user public key and a user escrow key transmitted from a client module, the client module having a processor and memory configured to (i) generate an asymmetric key pair for a user, including a user private key and the user public key, (ii) generate a symmetric encryption key for the user, the symmetric encryption key being generated based on unique information known to the user, (iii) encrypt the user private key using the symmetric encryption key to generate the user escrow key, (iv) transmit the user public key and the user escrow key, (v) encrypt plaintext data into ciphertext data using a content symmetric key, (vi) store the ciphertext data in a data storage unit, and generate an ephemeral pair of keys including an ephemeral public key and an ephemeral private key;
• storing, with the encrypted content management module, the user public key and the user escrow key;
• transmitting, with the encrypted content management module, the user public key to the client module, the processor and memory of the client module being further configured to (vii) generate a shared-secret key based on the ephemeral private key and the user public key using a diffie-hellman exchange algorithm, (viii) encrypt the content symmetric key using the shared-secret key, and (ix) communicate the encrypted content symmetric key and the ephemeral public key to the encrypted content management module;
• receiving, with the encrypted content management module, the encrypted content symmetric key and the ephemeral public key from the client module and
• storing, with the encrypted content management module, the encrypted content symmetric key and the ephemeral public key in the encrypted content management storage unit.