Software Service for Encrypting and Decrypting Data

• US 20120017095A1
• Filed: 07/19/2011
• Published: 01/19/2012
• Est. Priority Date: 07/19/2010
• Status: Abandoned Application

• Current Assignee: Coreguard
• Original Assignee: Coreguard
• Inventors: Schenk, Raymond Todd, Blenkhorn, Kevin Paul, Blenkhorn, Ari
• Application Number:
  US13/185,696
• Publication Number:
  US 20120017095A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services

Abstract

A system for making encryption and decryption available to software applications as a service is disclosed. An encryption/decryption server verifies the credentials of human operators, hardware devices, or combinations of operators and hardware devices and determines the cryptographic keys to which they have access, and provides access to said keys. Client software applications send service requests to the encryption/decryption server to encrypt or decrypt data. The server encrypts or decrypts the data as requested if the operator or device has the proper credentials to access the required key. The system may include multiple levels of security access.

Claims

1. A method for enabling encryption and decryption of data as a service, said method comprising the steps of:

providing an encryption/decryption engine;

verifying an identifier;

providing a repository; and

directing the encryption/decryption engine to process requests from a verified source associated with the identifier to encrypt or decrypt data using an appropriate key from the repository.

2. The method of claim 1, wherein the step of verifying an identifier further comprises verifying an identified user'"'"'s access level.

3. The method of claim 2, wherein the identified user'"'"'s access level is used in a determination to decrypt data and return the same to a user application.

4. The method of claim 2, wherein the identified user'"'"'s access level is used in a determination to encrypt data and communicate the same to a data store accessible to a user application.

5. The method of claim 1, wherein the repository is communicatively coupled to the encryption/decryption engine using a network protocol.

6. The method of claim 1, wherein providing an encryption/decryption engine further comprises one of including source code in a program, linking a library, and executing a program on a user accessible computing device.

7. The method of claim 6, wherein linking a library further comprises one of a static link or a dynamic link.

8. A method for transforming data communicated in a first format, said method comprising the steps of:

receiving a formatted request with data from an application;

identifying a source of the formatted request;

determining whether the source is associated with an appropriate access level; and

when the source is associated with an appropriate access level and a key for processing data at the access level is available, using an encryption/decryption engine to process the formatted request such that data received in the first format is translated to communicated in a second format that is different from the first format.

9. The method of claim 8, wherein the formatted request is communicated using a network protocol.

10. The method of claim 8, wherein the step of identifying a source comprises one of identifying a user, identifying a device, or identifying a combination of a user and a device.

11. The method of claim 8, wherein an identified source'"'"'s access level is used in a determination to decrypt data and return the same to a user application.

12. The method of claim 8, wherein the identified source'"'"'s access level is used in a determination to encrypt data and communicate the same to a data store accessible to a user application.

13. The method of claim 8, wherein a repository is communicatively coupled to the encryption/decryption engine.

14. The method of claim 13, wherein the repository is communicatively coupled to the encryption/decryption engine using a network protocol.

15. The method of claim 13, wherein the repository is communicatively coupled to the encryption/decryption engine using a data bus.

16. The method of claim 8, wherein the encryption/decryption engine is implemented via one of source code in a program, linking a library, or executing a separate program on a user accessible computing device.

17. The method of claim 16, wherein linking a library further comprises one of a static link or a dynamic link.

18. The method of claim 8, wherein the first format is cipher text and the second format is clear text.

19. The method of claim 8, wherein the first format is clear text and the second format is cipher text.

20. The method of claim 8, wherein the appropriate access level directs the encryption/decryption engine to translate data using multiple keys.