Off-loading data re-encryption in encrypted data management systems

A computer-implemented method for decrypting encrypted data wherein security of the encrypted data has been maintained despite the compromised private key, the method comprising:

• (a) responsive to a request for a decrypted version of an encrypted data unit associated with the compromised private key, decrypting an encrypted version of the compromised private key using a private key of a new asymmetric pair resulting in the compromised private key;
• (b) decrypting a re-encrypted symmetric key using the private key of the new asymmetric pair resulting in a previously encrypted version of the symmetric key;
• (c) decrypting the previously encrypted version of the symmetric key using the compromised private key resulting in a resultant symmetric key;
• and
• (d) responsive to the resultant symmetric key being an unencrypted version of the symmetric key, decrypting content data of the encrypted data unit using the unencrypted version of the symmetric key.

A computer-implemented system for decrypting encrypted data wherein security of the encrypted data has been maintained despite the compromised private key, the system comprising a decryption module for performing the following:

• (a) responsive to a request for a decrypted version of an encrypted data unit associated with the compromised private key, decrypting an encrypted version of the compromised private key using a private key of a new asymmetric pair resulting in the compromised private key;
• (b) decrypting a re-encrypted symmetric key using the private key of the new asymmetric pair resulting in a previously encrypted version of the symmetric key;
• (c) decrypting the previously encrypted version of the symmetric key using the compromised private key resulting in a resultant symmetric key;
• and
• (d) responsive to the resultant symmetric key being an unencrypted version of the symmetric key, decrypting content data of the encrypted data unit using the unencrypted version of the symmetric key.

A computer usable medium comprising instructions for causing a processor to execute a method for decrypting encrypted data wherein security of the encrypted data has been maintained despite the compromised private key, the method comprising:

• (a) responsive to a request for a decrypted version of an encrypted data unit associated with the compromised private key, decrypting an encrypted version of the compromised private key using a private key of a new asymmetric pair resulting in the compromised private key;
• (b) decrypting a re-encrypted symmetric key using the private key of the new asymmetric pair resulting in a previously encrypted version of the symmetric key;
• (c) decrypting the previously encrypted version of the symmetric key using the compromised private key resulting in a resultant symmetric key;
• and
• (d) responsive to the resultant symmetric key being an unencrypted version of the symmetric key, decrypting content data of the encrypted data unit using the unencrypted version of the symmetric key.

A computer-implemented system for decrypting encrypted data wherein security of the encrypted data has been maintained despite the compromised private key, the system comprising means for decryption for performing the following:

• (a) responsive to a request for a decrypted version of an encrypted data unit associated with the compromised private key, decrypting an encrypted version of the compromised private key using a private key of a new asymmetric pair resulting in the compromised private key;
• (b) decrypting a re-encrypted symmetric key using the private key of the new asymmetric pair resulting in a previously encrypted version of the symmetric key;
• (c) decrypting the previously encrypted version of the symmetric key using the compromised private key resulting in a resultant symmetric key;
• and
• (d) responsive to the resultant symmetric key being an unencrypted version of the symmetric key, decrypting content data of the encrypted data unit using the unencrypted version of the symmetric key.