Encryption key effective date
AssigneeAmerican Express Travel Related Services Company, Inc.
InventorsALLAN CHRISTOPHER POMEROY, PHILIP JOHN LUNDRIGAN
Life of this patent
Estimating the term…
Abstract
The system may comprise receiving a data element, and receiving an encryption key and an associated encryption key identifier from an encryption keystore database. The system may further comprise transmitting the data element to an encryption module for encryption using the encryption key to form an encrypted data element. The system may also comprise receiving the encrypted data element from the encryption module and concatenating the encryption key identifier with the encrypted data element to form a protected data field entry.
Claims20
A method comprising:
- concatenating, by a computer based system, a first encryption key identifier with a first encrypted data element to form a protected data field entry;
- associating, by the computer based system, an effective date with the first encryption key based on a date the first encrypted data element was encrypted via the first encryption key, wherein the effective date is the first encryption key identifier;
- retrieving, by the computer based system and in response to an encryption key change based on the effective date, a second encryption key;
- decrypting, by the computer based system and based on the first encryption key identifier, the first encrypted data element with the first encryption key to create a data element;
- encrypting, by the computer based system, the data element with the second encryption key to create a second encrypted data element;
- and
- prepending, by the computer based system, the second encryption key identifier to the second encrypted data element.
A method comprising:
- transmitting, by a computer based system, a first encryption key and a data field entry to a decryption module;
- receiving, by the computer based system, a decryption of an encrypted text portion;
- retrieving, by the computer based system and in response to an encryption key change based on an effective date, a second encryption key and a second clear text encryption key identifier;
- encrypting, by the computer based system, a data element with the second encryption key;
- and
- prepending, by the computer based system, the second clear text encryption key identifier to the data element encrypted with the second encryption key.
A method comprising,
- executing, by a computer based system, a batch job of encryption key changes via a database transaction;
- selecting, by the computer based system, an encrypted data record comprising a clear text portion and an encrypted text portion;
- reading, by the computer based system, a clear text encryption key identifier;
- referencing, by the computer based system, a keystore database for the read encryption key identifier;
- identifying, by the computer based system, an encryption key of the plurality of encryption keys associated with the encryption key identifier;
- retrieving, by the computer based system, a new encryption key associated with a new encryption key identifier from the keystore database;
- transmitting, by the computer based system, the identified encryption key to a decryption/encryption module to decrypt the encrypted text portion of the encrypted data record;
- transmitting, by the computer based system, the retrieved new encryption key to the decryption/encryption module to encrypt the decrypted data record via the new encryption key;
- and
- concatenating, by the computer based system, the new encryption key identifier with the encrypted decrypted data record form a protected data field entry, wherein encrypted decrypted data record is encrypted via the new encryption key.
Dependencies are inferred from the claim text.