Encryption key management program, data management system
AssigneeHitachi Solutions, Ltd.
InventorsMakoto AOYAGI, Minoru FUJIMOTO
Life of this patent
Estimating the term…
Abstract
An objective of the present invention is to ensure security of the file sharing function provided by cloud storages without significantly decreasing the convenience of cloud storages. The encryption key management program according to the present invention encrypts, using authentication information of a user, a group shared key shared in a user group and stores it as an encrypted group shared key. The encryption key management program, upon receiving a request from a user, sends the encrypted group shared key corresponding to the requesting user.
Claims15
An encryption key management program that causes a computer to perform a process for managing an encryption key, the encryption key management program causing the computer to execute:
- a group shared key encryption step of encrypting, using authentication information used for authenticating each of a plurality of users, a group shared key that is an encryption key shared in a group to which the plurality of users belongs to create an encrypted group shared key and storing the encrypted group shared key in a storage device;
- and
- an encryption key send step of performing, upon receiving a request to send an encryption key, a user authentication with respect to a client terminal that issued the request, and sending as a response to the request the encrypted group shared key corresponding to a user of the user authentication if approving the user authentication.
An encryption key management apparatus that manages an encryption key, comprising:
- a group shared key encryption unit that encrypts, using authentication information used for authenticating each of a plurality of users, a group shared key that is an encryption key shared in a group to which the plurality of users belongs to create an encrypted group shared key and that stores the encrypted group shared key in a storage device;
- and
- an encryption key send unit that performs, upon receiving a request to send an encryption key, a user authentication with respect to a client terminal that issued the request, and that sends as a response to the request the encrypted group shared key corresponding to a user of the user authentication if approving the user authentication.
Dependencies are inferred from the claim text.