Secure deferred file decryption
AssigneeARRIS Enterprises LLC
InventorsJinsong Zheng, Alexander Medvinsky, Tat Keung Chan, Ting Yao, Jason A. Pasion
Life of this patent
Estimating the term…
Abstract
A method is provided that permits user to submit a password to the private key that is to be used to decrypt files either at the time of user account setup or at the time of submitting the files. The password is stored securely in the system, permanently or temporarily, and is used later to decrypt the files right before the system is ready to process the files.
Claims19
A method of deferring decryption and processing of an encrypted file in a device with a data processor, the encrypted file encrypted according to a delivery public key of a delivery key pair and a password of a delivery private key, the delivery key pair comprising the delivery public key and the delivery private key, the method comprising:
- receiving the password of the delivery private key;
- generating a data package comprising the password of the delivery private key;
- encrypting the data package according to a password protection key, the password protection key unique to a processor type;
- and
- storing the encrypted data package and data processing job information referencing the encrypted file as a job record in persistent storage,
- verifying the password of the delivery private key after receiving the password and before generating the data package, comprising:
- generating random data;
- encrypting random data according to the delivery public key;
- decrypting the encrypted random data according to the delivery private key and the password of the delivery private key to produce derived random data;
- and
- verifying the password of the delivery private key only if the random data equals the derived random data.
An apparatus for deferring decryption and processing of an encrypted file, encrypted according to a delivery public key of a delivery key pair and a password of a delivery private key, the delivery key pair comprising the delivery public key and the delivery private key, the apparatus comprising:
- a first processor;
- a first memory, communicatively coupled to the first processor, the first memory storing first processor instructions including first processor instructions for:
- receiving the password of the delivery private key;
- generating a data package comprising the password of the delivery private key;
- encrypting the data package according to a password protection key, the password protection key unique to a processor type;
- and
- storing the encrypted data package and data processing job information referencing the encrypted file as a job record in persistent storage;
- verifying the password of the delivery private key after receiving the password and before generating the data package, comprising:
- generating random data;
- encrypting random data according to the delivery public key;
- decrypting the encrypted random data according to the delivery private key and the password of the delivery private key to produce derived random data;
- and
- verifying the password of the delivery private key only if the random data equals the derived random data.
Dependencies are inferred from the claim text.