Cloud key access mechanism
AssigneeIntel Corporation
InventorsAnees Azad Sahib, Veena Saini
Life of this patent
Estimating the term…
Abstract
An apparatus comprising one or more processors to receive a first request from an application to access one or more cryptographic keys from a cloud key vault, transmit the first request to the cloud key vault, receive the cryptographic keys from the cloud key vault, provide access to the one or more cryptographic keys to the application and store the one or more cryptographic keys within a trusted execution environment.
Claims20
An apparatus comprising:
- one or more processors to receive a first request from an application to access one or more cryptographic keys from a cloud key vault, transmit the first request to the cloud key vault, receive the cryptographic keys from the cloud key vault, provide access to the one or more cryptographic keys to the application and store the one or more cryptographic keys within a trusted execution environment.
An apparatus comprising:
- one or more processors to receive a first request from an application at a client to access one or more cryptographic keys, transmit the one or more cryptographic keys to a key vault client at the client, and set a flag indicating that the one or more cryptographic keys have been stored within a trusted execution environment at the client.
A method comprising:
- receiving a first request from an application to access one or more cryptographic keys from a cloud key vault;
- transmitting the first request to the cloud key vault;
- receiving the cryptographic keys from the cloud key vault;
- providing access to the one or more cryptographic keys to the application;
- and
- storing the one or more cryptographic keys within a trusted execution environment.
At least one computer readable medium having instructions stored thereon, which when executed by one or more processors, cause the processors to:
- transmit the first request to the cloud key vault;
- receive the cryptographic keys from the cloud key vault;
- provide access to the one or more cryptographic keys to the application;
- and
- store the one or more cryptographic keys within a trusted execution environment.
Dependencies are inferred from the claim text.