Format preserving encryption utilizing a key version
AssigneeEntit Software LLC
InventorsTimothy Roake, Cheryl He, Luther Martin
Life of this patent
Estimating the term…
Abstract
In one example, a system for format preserving encryption utilizing a key version can include a processor, and a memory resource storing instructions executable by the processor to determine a quantity of significant bits for a value to be encrypted, mask the value to include the quantity of significant bits, perform format preserving encryption on the masked value to generate an encrypted value, and append a key version to the encrypted value.
Claims20
A system, comprising:
- a processor;
- and
- a memory resource storing instructions executable by the processor to:
- determine a quantity of significant bits for a value to be encrypted;
- mask the value to include the quantity of significant bits;
- perform format preserving encryption on the masked value to generate an encrypted value;
- and
- append a key version to the encrypted value.
A non-transitory machine-readable storage medium having stored thereon machine-readable instructions to cause a computer processor to:
- perform format preserving encryption on a masked value to generate an encrypted value;
- append a key version to the encrypted value that represents a key value utilized to perform the format preserving encryption;
- determine a quantity of significant bits for the encrypted value;
- extract the key version from the appended encrypted value based on the quantity of significant bits for the encrypted value;
- and
- decrypt the encrypted value utilizing a key corresponding to the key version extracted from the appended encrypted value.
A method, comprising:
- masking a latitude/longitude value, wherein a quantity of least significant values of the latitude/longitude value are masked;
- performing format preserving encryption on the masked latitude/longitude value to generate an encrypted value with a masked portion;
- appending a key version to replace the masked portion of the encrypted value that represents a key version utilized to perform the format preserving encryption;
- extracting the key version from the appended encrypted value based on the quantity of least significant values for the appended encrypted value;
- and
- decrypting the appended encrypted value utilizing a key corresponding to the key version extracted from the appended encrypted value.
Dependencies are inferred from the claim text.