Back to results
US 2005/0097348 A1Published application
Password-based key management
AssigneeMicrosoft Corporation
InventorsMariusz Jakubowski, M. Mihcak
Life of this patent
Estimating the term…
Abstract
Systems, methods, and data structures permit data to be protected with complex keys and allow users to access the protected data using only a simple user id and password.
Claims85
A method comprising:
- creating a data structure including a plurality of user id-user key pairs, each user id-user key pair comprising a user id associated with one of a plurality of users and a user key comprising a master key encrypted using a password associated with the one of the plurality of users;
- and
- delivering the data structure to one or more of the plurality of users.
A method comprising:
- retrieving a user key associated with a first user of a plurality of users from a data structure comprising a plurality of user keys, each user key comprising a master key encrypted using a password associated with a unique one of the plurality of users;
- decrypting the retrieved user key using a password associated with the first user to produce a master key;
- and
- accessing data using the master key.
1 more element
A computer readable medium having stored thereon a data structure comprising:
- a plurality of user id-user key pairs, each user id-user key pair comprising a user id associated with one of a plurality of users and a user key comprising a master key encrypted using a password associated with the one of the plurality of users.
A system comprising:
- a hashing module operable to hash each of a plurality of user passwords to produce a plurality of hash values;
- an encryption module operable to create a plurality of user keys, each user key comprising a master key encrypted using one of the hash values as an encryption key;
- and
- a data structure creation module operable to associate each of the user keys with a user id in a data structure.
1 more element
A system comprising:
- a user key data structure including plurality of user id-user key pairs, each user key pair including a user key and a user id associated with one of a plurality of users, each user key comprising an encrypted version of a common master key;
- a master key decryption module operable to select a user key from the user key data structure based on a user id received from one of the plurality of users and to decrypt the selected user key using a password received from the one of the plurality of users.
A system comprising:
- means for producing a user key associated with each of a plurality users, each user key comprising a master key encrypted using a password of the one of the plurality of users associated with the user key;
- means for associating each of the user keys with a user id of the one of the plurality of users associated with the user key in a data structure.
A computer-readable medium having stored thereon computer executable instructions for performing acts of:
- creating a data structure including a plurality of user id-user key pairs, each user id-user key pair comprising a user id associated with one of a plurality of users and a user key comprising a master key encrypted using a password associated with the one of the plurality of users.
A computer-readable medium having stored thereon computer executable instructions for performing acts of:
- retrieving a user key associated with a first user of a plurality of users from a data structure comprising a plurality of user keys, each user key comprising a master key encrypted using a password associated with a unique one of the plurality of users;
- decrypting the retrieved user key using a password associated with the first user to produce a master key;
- and
- accessing data using the master key.
1 more element
Dependencies are inferred from the claim text.