Facilitating Encryption Key Allocation
AssigneeZoom Communications, Inc.
InventorsJohn Kennedy, Prasanna Kumar Malaiyandi, Karthik Raman, Jan Zila
Life of this patent
Estimating the term…
Abstract
Customers of a software platform, such as a unified communications as a service platform, are enabled to control their own encryption keys used to encrypt and decrypt data from various communication services in the software platform. A key broker server is employed to map encryption and decryption requests from servers in the platform to key management servers of customers based on user identifiers. Examples of data encrypted may includes conference recordings, webinar recordings, phone call recordings, voicemails, emails, and calendar tokens.
Claims20
A system comprising:
- a network interface,
- a processor, and
- a memory, wherein the memory stores instructions executable by the processor to:
- receive a decryption request from a first server that includes an identifier for one or more users and an encrypted key;
- select a key management server based on the identifier;
- transmit a request for a data encryption key to the selected key management server, wherein the request includes the encrypted key;
- receive a plaintext key from the key management server;
- and
- transmit the plaintext key to the first server.
A method comprising:
- receiving a decryption request from a first server that includes an identifier for one or more users and an encrypted key;
- selecting a key management server based on the identifier;
- transmitting a request for a data encryption key to the selected key management server, wherein the request includes the encrypted key;
- receiving a plaintext key from the key management server;
- and
- transmitting the plaintext key to the first server.
A system comprising:
- a network interface,
- a processor, and
- a memory, wherein the memory stores instructions executable by the processor to:
- receive an encryption request from a first server that includes an identifier for one or more users;
- select a key management server based on the identifier;
- transmit, using the network interface, a request for a data encryption key to the selected key management server;
- receive, using the network interface, a plaintext key and an encrypted key from the key management server;
- and
- transmit the plaintext key and the encrypted key to the first server.
Dependencies are inferred from the claim text.