Method for handling data
AssigneeInternational Business Machines Corporation
InventorsOliver Augenstein, Jan Camenisch
Life of this patent
Estimating the term…
Abstract
A method, a system and a computer program for changing an encryption key of data encrypted by a first key and stored on an archive server (40), wherein a conversion is applied to the data, generating recrypted data decryptable by means of a second key, the conversion being generated on a second server (30) and associated with the first key and the second key via a functional operation and transferred from the second server (30) to the archive server (40) via a transfer channel (38).
Claims11
A method for changing a data encryption key of data encrypted by a first key and stored on a storage medium of an archive server, wherein a conversion is applied to the data within the archive server, generating recrypted data decryptable by means of a second key, the conversion being generated on a second server and associated with the first key and the second key via a functional operation and transferred from the second server to the archive server via a transfer channel.
A computer program product in a computer-readable medium for carrying out a method when said computer program is run on a computer comprising the steps of:
- generating recrypted data decryptable by means of a second key, the conversion being generated on a second server and associated with the first key and the second key via a functional operation and transferred from the second server to the archive server via a transfer channel.
(canceled)
A system for changing a data encryption key of data stored on a storage medium of an archive server and encrypted by a first key using a method comprising at least the following elements:
- generating recrypted data decryptable by means of a second key, the conversion being generated on a second server and associated with the first key and the second key via a functional operation and transferred from the second server to the archive server via a transfer channel.
- a generating unit on a second server for generating a conversion which is associated with the first key and a second key via a functional operation,
- a transferring unit and a transfer channel for transferring said conversion from said second server via the transfer channel to said archive server,
- an encrypting unit on said archive server for applying said conversion to said data stored on the storage medium of said archive server, and
- a transferring unit and a transfer channel for transferring such processed data via the transfer channel to said second server.
Dependencies are inferred from the claim text.