DATA BACKUP AND SERVICE ENCRYPTION KEY MANAGEMENT

• US 20140317408A1
• Filed: 04/19/2013
• Published: 10/23/2014
• Est. Priority Date: 04/19/2013
• Status: Abandoned Application

• Current Assignee: Open Invention Network LLC
• Original Assignee: Kaseya International Limited (Kaseya Limited)
• Inventors: Runcie, George
• Application Number:
  US13/866,112
• Publication Number:
  US 20140317408A1
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062

Abstract

Disclosed are an apparatus and method of using encryption to access remote online application servers. One example method of operation may include applying an encryption key to an application server access operation. The method may include transmitting authentication credentials to an encryption server and receiving an application session key from the encryption server. The session key is then applied to an agent application seeking access to an application server. The method may also provide transmitting the session key in an encryption request to the encryption server to obtain an encryption key, and receiving an encryption key responsive to the transmitted session key.

Claims

1. A method comprising:

transmitting authentication credentials to an encryption server;

receiving an application session key from the encryption server;

applying the session key to an agent application seeking access to an application server;

transmitting the session key in an encryption request to the encryption server to obtain an encryption key; and

receiving an encryption key responsive to the transmitted session key.

2. The method of claim 1, further comprising:

establishing a new session, and wherein the application session key is applied to the new session.

3. The method of claim 1, wherein the application server is a storage server.

4. The method of claim 1, wherein the application server is an online application server.

5. The method of claim 1, wherein the application session key comprises an expiration time period.

6. The method of claim 1, further comprising:

transmitting a request for an application agent installation from a client device;

creating an updated encryption key responsive to receiving the request;

receiving the agent application installation information; and

receiving the updated encryption key.

7. The method of claim 1, further comprising:

requesting access to the application server;

transmitting the encryption key to the application server; and

receiving access to the application server.

8. An apparatus comprising:

a transmitter configured to transmit authentication credentials to an encryption server;

a receiver configured to receive an application session key from the encryption server;

a processor configured to apply the session key to an agent application seeking access to the application server, and wherein the transmitter is also configured to transmit the session key in an encryption request to the encryption server to obtain an encryption key, and receive an encryption key responsive to the transmitted session key.

9. The apparatus of claim 8, wherein the processor is further configured to establish a new session, and wherein the application session key is applied to the new session.

10. The apparatus of claim 8, wherein the application server is a storage server.

11. The apparatus of claim 8, wherein the application server is an online application server.

12. The apparatus of claim 8, wherein the application session key comprises an expiration time period.

13. The apparatus of claim 8, wherein the transmitter is further configured to transmit a request for an application agent installation from a client device and the processor is further configured to create an updated encryption key responsive to receiving the request, and the receiver is further configured to receive the agent application installation information, and receive the updated encryption key.

14. The apparatus of claim 8, further comprising:

transmitting an access request for access to the application server;

transmitting the encryption key to the application server; and

receiving access to the application server.

15. A non-transitory computer readable storage medium configured to store instructions that when executed cause a processor to perform:

transmitting authentication credentials to an encryption server;

receiving an application session key from the encryption server;

applying the session key to an agent application seeking access to an application server;

transmitting the session key in an encryption request to the encryption server to obtain an encryption key; and

receiving an encryption key responsive to the transmitted session key.

16. The non-transitory computer readable storage medium of claim 15, wherein the processor is further configured to perform:

establishing a new session, and wherein the application session key is applied to the new session.

17. The non-transitory computer readable storage medium of claim 15, wherein the application server is a storage server.

18. The non-transitory computer readable storage medium of claim 15, wherein the application server is an online application server.

19. The non-transitory computer readable storage medium of claim 15, wherein the application session key comprises an expiration time period.

20. The non-transitory computer readable storage medium of claim 15, wherein the processor is further configured to perform:

transmitting a request for an application agent installation from a client device;

creating an updated encryption key responsive to receiving the request;

receiving the agent application installation information;

receiving the updated encryption key;

requesting access to the application server;

transmitting the encryption key to the application server; and

receiving access to the application server.