Method, apparatus, and computer program product for encryption key management within a group-based communication system
AssigneeSlack Technologies, LLC
InventorsRichard Crowley, Audrei Drummond, Jessica Fain, Leah Jones, Ilan Frank, Nikolas Kinkel
Life of this patent
Estimating the term…
Abstract
Various embodiments are directed to systems and methods for encryption key management within a group-based communication platform.
Claims36
An apparatus for providing encryption key management within a group-based communication system, the apparatus comprising at least one process and at least one non-transitory memory storing instructions that, when executed by the processor, configure the apparatus to:
- receive, from a group-based communication server, an encrypt request, the encrypt request comprising an encryption key request data structure and encrypt request plaintext;
- retrieve, from at least one local memory, an encryption key associated with the encryption key request data structure;
- encrypt the encrypt request plaintext using the encryption key to produce encrypt request ciphertext;
- and
- transmit, to the group-based communication server, the encrypt request ciphertext, at least part of the encryption key request data structure, and encryption key ciphertext based on the encryption key.
7-19. (canceled)
An apparatus for providing encryption key management, the apparatus capable of communicating with one or more servers of a communication system, the apparatus comprising at least one processor and at least one non-transitory memory storing instructions that, when executed by the processor, configure the apparatus to:
- provide, to the one or more servers, access to one or more encryption keys provided by a key material source, the encryption keys for accessing data managed by the communication system;
- wherein access to encryption keys is revocable on a per keyscope component basis, wherein a keyscope component is associated with an encryption key and is one of a timestamp, a user identifier, a message identifier, a file identifier, group-based communication channel identifier, a group-based communication team identifier, a group-based communication workspace identifier.
25-110. (canceled)
A computer implemented method for providing encryption key management within a group-based communication system, comprising:
- receiving, from a group-based communication server, an encrypt request, the encrypt request comprising an encryption key request data structure and encrypt request plaintext;
- retrieving, from at least one local memory, an encryption key associated with the encryption key request data structure;
- encrypting the encrypt request plaintext using the encryption key to produce encrypt request ciphertext;
- and
- transmitting, to the group-based communication server, the encrypt request ciphertext, at least part of the encryption key request data structure, and encryption key ciphertext based on the encryption key.
112-113. (canceled)
115-116. (canceled)
(canceled)
A computer implemented method for providing encryption key management, comprising:
- providing, to one or more servers of a communication system, access to one or more encryption keys provided by a key material source, the encryption keys for accessing data managed by the communication system;
- wherein access to encryption keys is revocable on a per keyscope component basis, wherein a keyscope component is associated with an encryption key and is one of a timestamp, a user identifier, a message identifier, a file identifier, group-based communication channel identifier, a group-based communication team identifier, a group-based communication workspace identifier.
135-165. (canceled)
Dependencies are inferred from the claim text.