Securely sharing data and access permissions in a cloud environment
AssigneeMicron Technology, Inc.
InventorZhan Liu
Life of this patent
Estimating the term…
Abstract
In some aspects, the techniques described herein relate to a method including: transmitting, by a user device, a public key of a client device to a key management server (KMS); generating, by the KMS, a digital certificate using the public key of the client device; storing the digital certificate in a storage device of a cloud service; generating, by the client device, a signed command to access the storage device, the signed command signed using a private key corresponding to the public key of the client device; and issuing the signed command to the storage device to access data stored by the storage device.
Claims20
A method comprising:
- obtaining, by a user device having ownership of a storage device of a cloud service and from a client device to be authorized by the user device to access the storage device, a public key of the client device;
- transmitting, by the user device, the public key of the client device to a key management server (KMS);
- generating, by the KMS, a digital certificate using the public key of the client device;
- storing, by the user device, the digital certificate into the storage device of the cloud service to provide the client device with access to data stored in the storage device;
- receiving, in the storage device and from the client device, a signed command to access the data in the storage device, wherein the signed command is signed by the client device using a private key corresponding to the public key of the client device;
- and
- validating, by the storage device, the signed command using the public key included in the digital certificate stored by the user device.
A non-transitory computer-readable storage medium for tangibly storing computer program instructions which, when executed by a computer processor, cause the computer processor to perform a method, comprising
- obtaining, by a user device having ownership of a storage device of a cloud service and from a client device to be authorized by the user device to access the storage device, a public key of the client device;
- transmitting, by the user device, the public key of the client device to a key management server (KMS);
- generating, by the KMS, a digital certificate using the public key of the client device;
- storing, by the user device, the digital certificate into the storage device of cloud service to provide the client device with access to data stored in the storage device;
- receiving, in the storage device and from the client device, a signed command to access the data in the storage device, wherein the signed command signed by the client device using a private key corresponding to the public key of the client device;
- and
- validating, by the storage device, the signed command using the public key included in the digital certificate stored by the user device.
A system comprising:
- a key management server (KMS);
- a storage device of a cloud service;
- and
- a user device, the user device having ownership of the storage device;
- wherein the user device is configured to:
- obtain, from a client device to be authorized by the user device to access the storage device, a public key of the client device;
- transmit the public key of the client device to the KMS, the KMS configured to generate a digital certificate using the public key of the client device in response to the public key of the client device, and
- store the digital certificate into the storage device of the cloud service to provide the client device with access to data stored in the storage device;
- wherein the client device is configured to;
- and
- receive, from the client device, a signed command to access the data in the storage device, wherein the signed command is signed using a private key corresponding to the public key of the client device;
- and
- validate the signed command using the public key included in the digital certificate stored by the user device.
Dependencies are inferred from the claim text.