Self-encrypting key management system
AssigneeFortanix, Inc.
InventorsAmbuj KUMAR, Anand KASHYAP, Jethro Gideon BEEKMAN, Faisal FARUQUI
Life of this patent
Estimating the term…
Abstract
A system disclosed herein may receive, from an application associated with a client identification, a request to perform a cryptographic operation with a specified application key, identify a gateway associated with the client identification, identify a respective characteristic of each self-encrypting key management service of a plurality of self-encrypting key management services that correspond to the gateway, identify a self-encrypting key management service with a characteristic satisfying a threshold criterion, and send the request to the identified self-encrypting key management service.
Claims20
A method comprising:
- receiving, from an application, a request to perform a cryptographic operation with a specified application key, wherein the application is associated with a client identification;
- identifying a gateway associated with the client identification;
- identifying, by a processing device, a respective characteristic of each self-encrypting key management service of a plurality of self-encrypting key management services that correspond to the gateway;
- identifying a self-encrypting key management service of the plurality of self-encrypting key management services, wherein a characteristic of the identified self-encrypting key management service satisfies a threshold criterion;
- and
- sending the request to the identified self-encrypting key management service.
A system comprising:
- a memory;
- and
- a processing device, operatively coupled with the memory, to:
- receive, from an application, a request to perform a cryptographic operation with a specified application key wherein the application is associated with a client identification;
- identify a gateway associated with the client identification;
- identify a respective characteristic of each self-encrypting key management service of a plurality of self-encrypting key management services that correspond to the gateway;
- identify a self-encrypting key management service of the plurality of self-encrypting key management services, wherein a characteristic of the identified self-encrypting key management service satisfies a threshold criterion;
- and
- send the request to the identified self-encrypting key management service.
A non-transitory computer readable medium comprising data that, when accessed by a processing device, cause the processing device to perform operations comprising:
- receiving, from an application, a request to perform a cryptographic operation with a specified application key wherein the application is associated with a client identification;
- identifying a gateway associated with the client identification;
- identifying a respective characteristic of each self-encrypting key management service of a plurality of self-encrypting key management services that correspond to the gateway;
- identifying a self-encrypting key management service of the plurality of self-encrypting key management services, wherein a characteristic of the identified self-encrypting key management service satisfies a threshold criterion;
- and
- sending the request to the identified self-encrypting key management service.
Dependencies are inferred from the claim text.