US 2010/0306554 A1 · DISTRIBUTED KEY ENCRYPTION IN SERVERS

Abstract

Architecture that stores specific passwords on behalf of users, and encrypts the passwords using encryption keys managed by a distributed key management system. The encryption keys are stored in a directory service (e.g., hierarchical) in an area that is inaccessible by selected entities (e.g., administrative users) having superior permissions such as supervisory administrators, but accessible to the account components that need to access the unencrypted passwords. The distributed key management system makes the encryption key stored in the directory service available to all hardware/software components that need the key to encrypt or decrypt the passwords.

Claims20

Dependent claims

A computer-implemented data protection system, comprising:

a security component for encrypting access information for an external service using an encryption key;
and
a storage component for storing the encryption key in a storage location accessible to a system component that utilizes the external service and is inaccessible by an administrative entity.

Dependencies are inferred from the claim text.

Facts

Application

12/471,474Filed 26 May 2009

Published

2 Dec 2010

Term ends

Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06F 21/6209
Protecting access to data via a platform, e.g. using keys or access control rules: to a single file or object, e.g. in a secure envelope,…
H04L 9/006
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: involving public key…
H04L 9/3263
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…
H04L 63/0823
For authentication of entities: using certificates

Distributed key encryption in servers

Life of this patent

Distributed key encryption in servers

Life of this patent

Abstract

Claims20