Back to results
US 9,432,346 B2Granted
Protocol for controlling access to encryption keys
OwnerDavid H. Maddeninventor
Life of this patent
Estimating the term…
Abstract
A secure remote-data-storage system stores encrypted data and both plaintext and encrypted keys at a server, where data at the server is inadequate to recover the plaintext of the encrypted data; and stores at least one encrypted key at a client system. To decrypt the data, the client must obtain a copy of the encrypted data from the server, and a key to decrypt its locally-stored encrypted key. Once decrypted, the locally-stored key can be used to decrypt the encrypted data, or to decrypt an encrypted key from the server, which may then be used decrypt the encrypted data.
Claims8
A method comprising:
- obtaining plaintext data for a plurality of fields of a database record;
- selecting a plurality of random symmetric encryption keys;
- encrypting at least one of the plaintext data for the plurality of database fields using at least one of the plurality of random symmetric encryption keys to produce a database record for storage, at least one of the fields of the database record for storage thus being encrypted;
- arranging the plurality of random symmetric encryption keys into a key block;
- padding the key block with zero or more padding bits to produce a padded key block, a total number of bits of the padded key block similar to but not exceeding a number of bits of a public/private key pair;
- encrypting the padded key block with a public key of the public/private key pair to produce an encrypted key block;
- and
- transmitting the database record for storage and the encrypted key block to a server.
5 more elements
Dependencies are inferred from the claim text.