CONTENT ENCRYPTION TO PRODUCE MULTIPLY ENCRYPTED CONTENT

• US 20160253516A1
• Filed: 11/01/2013
• Published: 09/01/2016
• Est. Priority Date: 11/01/2013
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Beiter, Michael Beiter, Andriotti, Gustavo Kuhn, RAFAELI, SANDRO
• Application Number:
  US15/032,285
• Publication Number:
  US 20160253516A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 9/0668 producing a non-linear pseudorandom sequence
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

Examples herein disclose receiving encrypted content encrypted with a first key. The examples disclose receiving a second key associated with the encrypted content, wherein the second key is a different encryption key from the first key. Additionally, the examples disclose encrypting the encrypted content with the second key to produce multiply encrypted content.

Claims

1. A non-transitory machine-readable storage medium encoded with instructions executable by a processor of a computing device, the storage medium comprising instructions to:

receive encrypted content, the content encrypted with a first key;

receive a second key associated with the encrypted content based upon a revocation of access to the encrypted content, the second key is a different encryption key than the first key;

encrypt the encrypted content with the second key for producing a multiply encrypted content.

2. The non-transitory machine-readable storage medium including the instructions of claim 1 wherein to encrypt the encrypted content with the second key for producing the multiply encrypted content is further comprising instructions to:

generate a key stream horn the second key;

combine the key stream and the encrypted content resulting in the multiply encrypted content; and

delete the key stream based upon the resulting multiply encrypted content.

3. The non-transitory machine-readable storage medium including the instructions of claim 1 wherein to receive the second key associated with the encrypted content is without receiving the first key.

4. A system comprising:

a storage provider to;

receive encrypted content, the encrypted content decryptable by a first key;

receive a second key associated with the encrypted content;

encrypt the encrypted content with the second key, wherein the first key is a different encryption key from the second key; and

produce multiply encrypted content, the multiply encrypted content decryptable by the first key and the second key.

5. The system of claim 4 wherein the storage provider is without access to the first key, the system further comprising:

a client to;

receive the first key and the second key from the controller;

generate a first key stream and a second key stream from the first key and the second key, respectively;

decrypting the multiply encrypted content based on the first key stream and the second key stream.

6. The system of claim 4 wherein the storage provider is to encrypt the encrypted content with the second key, the storage provider is further to:

generate a key stream from the second key;

combine the key stream and the encrypted content to produce the multiply encrypted content.

7. The system of claim 4 further comprising:

a controller to;

provide the encrypted content to the storage provider;

provide the storage provider access to the second key without providing access to the first key; and

transmit the first key and the second key to a client.

8. The system of claim 7 wherein the controller is further to:

generate a third key based upon a revocation of access by the client to the multiply encrypted content;

transmit the third key to the storage provide for encryption of the multiply encrypted content; and

transmit the first key, the second key, and the third key to another client.

9. The system of claim 4 further comprising:

another storage provider to receive a third key, different from the first key and the second key, based upon a revocation of access to the multiply encrypted content, wherein the other storage provider is without access to the first key and the second key.

10. A method, executable by a storage provider, the method comprising:

receiving encrypted content, the content encrypted with a first key;

receiving a second key associated with the encrypted content, wherein the second key is a different encryption key from the first key; and

encrypting the encrypted content with the second key to produce multiply encrypted content.

11. The method of claim 10 wherein encrypting the encrypted content with the second key to produce the multiply encrypted content is comprising:

generating a key stream based on the second key;

combining the key stream and the encrypted content to produce the multiple encrypted content; and

deleting the key stream based upon the produced multiply encrypted content.

12. The method of claim 10 wherein receiving the second key associated with the encrypted payload is without receiving access to the first key, the method is further comprising:

revoking access, by a computing device, to the encrypted content.

13. The method of claim 10 further comprising:

deleting the encrypted content based on the production of the multiple encrypted content.

14. The method of claim 10 further comprising:

receiving a third key associated with the multiply encrypted content upon a revocation of access to the multiply encrypted content.

15. The method of claim 10 wherein encrypting the encrypted content with the second key to provide the multiply encrypted content is comprising:

generating a key stream from the second key;

determining a length of the encrypted content and a length of the key stream;

upon the determination the lengths are dissimilar, padding the encrypted content with additional data.