System and method for encryption and decryption based on quantum key distribution
AssigneeAlibaba Group Holding Limited
InventorsPeng Yuan, Zhiqiang Wang
Life of this patent
Estimating the term…
Abstract
One embodiment of the present invention provides a system for facilitating storage encryption and decryption. During operation, the system receives a first request to encrypt data which is to be stored on a remote device, wherein the first request indicates the data. The system updates a key based on a dynamic key refreshment protocol. The system determines a key label for the updated key. The system encrypts the data based on the updated key, and transmits the encrypted data and the key label to the remote device, thereby facilitating secure encryption and decryption of data on the remote device.
Claims20
A computer system for facilitating storage encryption and decryption, the system comprising:
- a processor;
- and
- a memory coupled to the processor and storing instructions, which when executed by the processor cause the processor to perform a method, the method comprising:
- receiving a first request to encrypt data, wherein the first request indicates the data to be encrypted;
- encrypting the data based on a key;
- determining a key label for the key;
- and
- transmitting the encrypted data and the key label to a remote device,
- thereby facilitating secure encryption and decryption of data on the remote device.
A computer system for facilitating data access and data decryption, the system comprising:
- a processor;
- and
- a memory coupled to the processor and storing instructions, which when executed by the processor cause the processor to perform a method, the method comprising:
- receiving a first request to decrypt encrypted data, wherein the first request indicates the encrypted data and a key label for a first key used to encrypt the data;
- transmitting a second request for the first key, wherein the second request includes the key label;
- receiving the first key;
- and
- decrypting the encrypted data based on the received first key.
A computer system for facilitating storage encryption and decryption, the system comprising:
- a processor;
- and
- a memory coupled to the processor and storing instructions, which when executed by the processor cause the processor to perform a method, the method comprising:
- receiving, based on a dynamic key refreshment protocol, a first synchronization request which indicates a first key obtained from a first key pool;
- obtaining a second key from a second key pool, wherein the second key is the same as the first key;
- obtaining a second key label for the second key, wherein the second key label is the same as a first key label obtained for the first key;
- and
- storing the second key and the second key label,
- thereby facilitating secure encryption and decryption of data on a remote device.
A computer-implemented method for facilitating storage encryption and decryption, the method comprising:
- receiving a first request to encrypt data, wherein the first request indicates the data to be encrypted;
- encrypting the data based on a key;
- determining a key label for the key;
- and
- transmitting the encrypted data and the key label to a remote device,
- thereby facilitating secure encryption and decryption of data on the remote device.
A computer-implemented method for facilitating data access and data decryption, the method comprising:
- receiving a first request to decrypt encrypted data, wherein the first request indicates the encrypted data and a key label for a first key used to encrypt the data;
- transmitting a second request for the first key, wherein the second request includes the key label;
- receiving the first key;
- and
- decrypting the encrypted data based on the received first key.
Dependencies are inferred from the claim text.