Aravind N Thoram

US Patent:

20190007204, Jan 3, 2019

Filed:

Jun 30, 2017

Appl. No.:

15/639698

Inventors:

- Redmond WA, US
Aravind N. Thoram - Sammamish WA, US
John Michael Walton - Redmond WA, US
Dayi Zhou - Redmond WA, US
Alex M. Semenko - Issaquah WA, US
Avraham Michael Ben-Menahem - Sammamish WA, US

International Classification:

H04L 9/08
G06F 12/14
H04L 29/06

Abstract:

Systems and methods are provided for adding security to client data by maintaining decryption keys at a server that provide access to encrypted keys that are maintained at a client system with encrypted client data. A specialized protocol is utilized for accessing the decryption keys from the server. Once obtained, the decryption key is used to decrypt the encrypted key at the client and then the newly decrypted decryption key is used to decrypt the encrypted data. A server can also perform policy checks or trigger additional authentication such as SMS, phone, or email notification before allowing access to the server decryption key. Furthermore, in some instances, the server can also prevent access to the server decryption keys in response to anomalies, such as decommissioning and other asset management events.