Field level data protection for cloud services using asymmetric cryptography
US9965645B2 · kind B2 · utility
Assignee
Inventor
Key dates
| Filing date | May 12, 2016 |
| Grant date | May 8, 2018 |
| Priority date | — |
| Expiry date | May 12, 2036 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/102
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Systems, apparatuses, and methods for providing data security for data that is stored in a cloud-level platform. In one embodiment, each session is associated with specific session “keys” for use in encrypting and decrypting data. The session specific keys are generated by a client application and the client public key of a public/private key pair is provided to the cloud platform as part of a user authentication process. If the user is properly authenticated, then the platform creates its own set of keys and sends the server public key of a public/private key pair to the client. When the client requests a data record or document, the platform can determine if the user is authorized to have access to the entire data record or document or only to certain fields or portions of the record or document. Based on that determination, the platform may selectively encrypt certain fields or portions of the record or document with the client public key.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.