US 2019/0245683 A1Published application

Automated changeover of transfer encryption key

AssigneeMicrosoft Technology Licensing, LLC

InventorsVenkatesh NARAYANAN, Anoob Backer Mundapillythottathil ABOO BACKER, Soumya DESAI, Akshay N V, Nagalinga Raju SAMUTHIRAPANDI, Soumya JAIN

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

The automated changeover of a transfer encryption key from one transfer encryption key to another. This occurs in an environment in which a set of computing systems are to share one or more keys (such as a private and public key pair). The transfer encryption key is used to encrypt communications of the key(s) such that the encrypted key(s) may be transferred over a transfer system without the transfer system having access to the key(s). In order to perform automated changeover of the transfer encryption key, one of the set of computing systems encrypts the next transfer encryption key with the prior transfer encryption key. The transfer system provides this encrypted message to the remainder of the set of computing systems, which may then decrypt the encrypted message using the prior transfer encryption key, to find the next transfer encryption key.

Claims20

Dependent claims

A computing system comprising:

one or more processors;
and
one or more computer-readable media having stored thereon computer-executable instructions that are structured such that, when executed by the one or more processors, cause the computing system to perform a method for participating in secure communication of at least one private key between multiple computing systems using a transfer system that does not have access to the at least one private key, the method comprising:
participating in communication of a first encrypted message between a first plurality of computing systems over a transfer system, the first encrypted message comprising an encrypted private key that is encrypted using a first transfer encryption key, the transfer system not having access to the private key;
after participating in communication of the first encrypted message, encrypting a second encrypted message using the first transfer encrypted key, the second encrypted message comprising a second transfer encryption key encrypted by the first transfer encryption key;
and
initiating transfer of the second encrypted message over the transfer system to at least one other computing system.

4 more elements

A computing system comprising:

one or more processors;
and
one or more computer-readable media having stored thereon computer-executable instructions that are structured such that, when executed by the one or more processors, cause the computing system to perform a method for participating in secure communication of at least one private key between multiple computing systems using a transfer system that does not have access to the at least one private key, the method comprising:
participating in communication of a first encrypted message between a first plurality of computing systems over the transfer system, the first encrypted message comprising an encrypted private key that is encrypted using a first transfer encryption key;
after participating in communication of the first encrypted message, and in response to detecting receipt of a second encrypted message, decrypting the encrypted second message using the first transfer encryption key to obtain a second transfer encryption key;
and
participating in communication of a third encrypted message between a second plurality of computing systems over the transfer system, the third encrypted message being encrypted using the second transfer encryption key.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/890,148Filed 6 Feb 2018
Published: 8 Aug 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04L 9/0825
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…
H04L 63/0442
Wherein the data content is protected, e.g. by encrypting or encapsulating the payload: wherein the sending and receiving network entities apply…
H04L 63/061
For supporting key management in a packet data network: for key exchange, e.g. in peer-to-peer networks
H04L 63/068
For supporting key management in a packet data network: using time-dependent keys, e.g. periodically changing keys

Family

US 10,958,423 B2Related patent
US 2019/0245683 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key