Back to results
US 12,015,699 B2Granted
Method, apparatus, and computer program product for encryption key management within a group-based communication system
AssigneeSalesforce, Inc.
InventorsRichard Crowley, Audrei Drummond, Jessica Fain, Leah Jones, Ilan Frank, Nikolas Kinkel
Life of this patent
Estimating the term…
Abstract
Various embodiments are directed to systems and methods for encryption key management within a group-based communication platform.
Claims20
One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor, perform a method of providing encryption key management, the method comprising the steps of:
- receiving, from a server, an encrypt request, the encrypt request comprising an encryption key request data structure and encrypt request plaintext, wherein the encryption key request data structure comprises one or more keyscope components, and the encrypt request plaintext comprises one or more of a message plaintext, a file plaintext, or a search index plaintext;
- upon determining that an encryption key associated with the encryption key request data structure is not stored in at least one local memory, transmitting an encryption key generation request to a key server, the encryption key generation request comprising the encryption key request data structure;
- upon determining that the key server has not responded with one or more of the encryption key and encryption key ciphertext, transmitting an encrypt request error to the server, wherein the encrypt request error comprises an electronic message indicating that access to a requested encryption key is denied;
- and
- revoking, on a per keyscope component basis, access to encryption keys associated with the one or more keyscope components.
2 more elements
A method of providing encryption key management comprising the steps of:
- receiving, from a server, an encrypt request, the encrypt request comprising an encryption key request data structure and encrypt request plaintext, wherein the encryption key request data structure comprises one or more keyscope components, and the encrypt request plaintext comprises one or more of a message plaintext, a file plaintext, or a search index plaintext;
- upon determining that an encryption key associated with the encryption key request data structure is not stored in at least one local memory, transmitting an encryption key generation request to a key server, the encryption key generation request comprising the encryption key request data structure;
- upon determining that the key server has not responded with one or more of the encryption key and encryption key cipher text, transmitting an encrypt request error to the server, wherein the encrypt request error comprises an electronic message indicating that access to a requested encryption key is denied;
- and
- revoking, on a per keyscope component basis, access to encryption keys associated with the one or more keyscope components.
2 more elements
A system for providing encryption key management, comprising:
- a server;
- a key server;
- and
- an encryption key management server,
- wherein the encryption key management server is programmed to perform a method of providing encryption key management, the method comprising the steps of:
- receiving, from the server, an encrypt request, the encrypt request comprising an encryption key request data structure and encrypt request plaintext, wherein the encryption key request data structure comprises one or more keyscope components, and the encrypt request plaintext comprises one or more of a message plaintext, a file plaintext, or a search index plaintext;
- upon determining that an encryption key associated with the encryption key request data structure is not stored in at least one local memory, transmitting an encryption key generation request to the key server, the encryption key generation request comprising the encryption key request data structure;
- upon determining that the key server has not responded with one or more of the encryption key and encryption key cipher text, transmitting an encrypt request error to the server, wherein the encrypt request error comprises an electronic message indicating that access to a requested encryption key is denied;
- and
- revoking, on a per keyscope component basis, access to encryption keys associated with the one or more keyscope components.
7 more elements
Dependencies are inferred from the claim text.