Back to results
US 9,753,866 B1Granted
Separate cryptographic keys for protecting different operations on data
AssigneeOpen Invention Network, LLC
InventorsGeoffrey G. Thomas, John Whaley, Thomas Joseph Purtell, II
Life of this patent
Estimating the term…
Abstract
The disclosed embodiments provide a system that processes data. During operation, the system uses a first key to protect a write operation on the data. Next, the system uses a second key to protect a read operation on the data.
Claims20
A method, comprising:
- using a first key to protect a write operation on data by encrypting, by computer, the data with a data key;
- using a second key to protect a read operation on the data by decrypting the data with the data key and verifying a signature associated with the data with the second key;
- and
- using a third key to protect a write operation on metadata for the data by encrypting the metadata with a metadata key;
- wherein using the first key to protect the write operation further involves appending an amount of padding in the encrypted data to the encrypted data;
- wherein the write operation is protected prior to performing the write operation with a remote storage mechanism;
- wherein the read operation is protected after performing the read operation with the remote storage mechanism;
- wherein an amount of padding is determined by performing a modulo operation on a length of the data with a block size and subtracting a result of the modulo operation from the block size;
- wherein the determined amount of padding is appended to the encrypted data.
6 more elements
A system, comprising:
- a computer write-management apparatus configured to:
- use a first key to protect a write operation on data by an encryption of the data with a data key;
- and
- use a third key to protect a write operation on metadata for the data by an encryption of the metadata with a metadata key;
- and
- a computer read-management apparatus configured to:
- use a second key to protect a read operation on the data by a decryption of the data with the data key and a verification of a signature associated with the data with the second key;
- wherein using the first key to protect the write operation further involves an amount of padding in the encrypted data appended to the encrypted data;
- wherein the write operation is protected prior to the write operation being performed with a remote storage mechanism;
- wherein the read operation is protected after the read operation is performed with the remote storage mechanism;
- wherein an amount of padding is determined by a modulo operation being performed on a length of the data with a block size and a result of the modulo operation being subtracted from the block size;
- wherein the determined amount of padding is appended to the encrypted data.
9 more elements
A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform:
- using a first key to protect a write operation on data by encrypting the data with a data key;
- and
- using a second key to protect a read operation on the data by decrypting the data with the data key and verifying a signature associated with the data with the second key;
- using a third key to protect a write operation on metadata for the data by encrypting the metadata with a metadata key;
- wherein using the first key to protect the write operation further involves appending an amount of padding in the encrypted data to the encrypted data;
- wherein the write operation is protected prior to performing the write operation with a remote storage mechanism;
- wherein the read operation is protected after performing the read operation with the remote storage mechanism;
- wherein an amount of padding is determined by performing a modulo operation on a length of the data with a block size and subtracting a result of the modulo operation from the block size;
- wherein the determined amount of padding is appended to the encrypted data.
6 more elements
Dependencies are inferred from the claim text.