Method and system for secure data sharing
AssigneeCryptomill Inc.
InventorsChen Li TIEN, Joseph Mari Villamor OCOL, Deepu FILJI, Cristian Sebastian NICULESCU, Ivan Canute SERRAO, Christian George BATTY, Nandini JOLLY
Life of this patent
Estimating the term…
Abstract
A method of protecting data is disclosed herein. The method comprises: encrypting a data in a protected data item using a first encryption key; and encrypting the first encryption key in the protected data item using a second encryption key that is unique to the protected data item, wherein the unique second encryption key is derived from a third encryption key in the protected data item and to a plurality of protected data items comprising a common characteristic shared with the protected data item.
Claims17
A method of protecting data, the method comprising:
- encrypting a data in a protected data item using a first encryption key;
- and
- encrypting the first encryption key in the protected data item using a second encryption key that is unique to the protected data item,
- wherein the unique second encryption key is derived from a third encryption key corresponding both to the protected data item and to a plurality of protected data items comprising a common characteristic shared with the protected data item.
A method of protecting data, the method comprising:
- defining a trust boundary and a corresponding trust boundary key;
- assigning a protected data item to the trust boundary, the protected data item comprising a randomly generated cryptographic salt;
- encrypting a data in the protected data item using a first encryption key;
- and
- encrypting the first encryption key in the protected data item using a second encryption key derived from the cryptographic salt and the trust boundary key for associating the encrypted data to the trust boundary.
A system for protecting data, the system comprising:
- an encryption component for encrypting a data in a protected data item using a first encryption key, and for encrypting the first encryption key in the protected data item using a second encryption key that is unique to the protected data item,
- wherein the unique second encryption key is derived from a third encryption key corresponding both to the protected data item and to a plurality of protected data items comprising a common characteristic shared with the protected data item.
A system for protecting data, the system comprising:
- a trust boundary creator for defining a trust boundary and a corresponding trust boundary key;
- a trust boundary assignor for assigning a protected data item to the trust boundary, the protected data item comprising a randomly generated cryptographic salt;
- and,
- a data encryption component for encrypting a data in the protected data item using a first encryption key, and for encrypting the first encryption key in the protected data item using a second encryption key derived from the cryptographic salt and the trust boundary key for associating the encrypted data to the trust boundary.
Dependencies are inferred from the claim text.