Increasing data security in enterprise applications by obfuscating encryption keys
AssigneeOracle International Corporation
InventorGeorge R. Pogmore
Life of this patent
Estimating the term…
Loading patent…
AssigneeOracle International Corporation
InventorGeorge R. Pogmore
Estimating the term…
A method, system, and computer program product for using hidden buffer formatting and passing obfuscated encryption key values to detect tampering with and/or prevent unauthorized inspection of a data buffer. The method comprises receiving an unencrypted sequence to be encrypted, selecting a layout version to associate to an encryption method and a checksum method, then encrypting the unencrypted sequence using the encryption method to form an encrypted sequence, and calculating, using the checksum calculation method, an unencrypted sequence checksum. Further, storing the encrypted sequence to form a hidden buffer payload, which hidden buffer has its own hidden buffer payload checksum. Encryption keys are not stored in program data, nor sent in the hidden buffers. Instead obfuscated encryption key values are used to generate keys on the fly. The receiver of a hidden buffer and obfuscated encryption key values can detect tampering or data corruption of the payload for further processing.
A computer implemented method for generating obfuscated cryptographic key values within an enterprise software application, the method comprising:
A computer system for generating obfuscated cryptographic key values within an enterprise software application, comprising:
A computer program product embodied in a non-transitory computer readable medium, the computer readable medium having stored thereon a sequence of instructions which, when executed by a processor causes the processor to execute a method for generating obfuscated cryptographic key values within an enterprise software application, the method comprising:
Dependencies are inferred from the claim text.