Method and apparatus for managing a key management system

• US 7,603,322 B2
• Filed: 12/29/2006
• Issued: 10/13/2009
• Est. Priority Date: 02/25/2002
• Status: Expired due to Fees

• Current Assignee: DEXA Systems Incorporated
• Original Assignee: DEXA Systems Incorporated
• Inventors: Syed, Jameel Ur Rahman, Lam, Chui-Shan Teresa
• Primary Examiner(s): Hewitt, II; Calvin L
• Assistant Examiner(s): Qayyum; Zeshan
• Application Number:
  US11/647,841
• Publication Number:
  US 20070217613A1
• Time in Patent Office: 1,019 Days
• Field of Search: 705/59
• US Class Current: 705/71
• CPC Class Codes: G06Q 10/103 Workflow collaboration or project management
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

A network system for key management, including a server, a key management system providing process logic for key management system management located on the server, a key management system storage providing a secure data storage for the key management system, an application using the key management system to manage an application key, and an interface providing a means for managing the key management system.

Claims

1. A computer readable medium comprising computer executable instructions for retrieving a value secured in a key management system, the instructions, when executed, causing a processor to perform method steps of:

obtaining a decoded key list by decoding an encoded key list, wherein the decoded key list comprises a key corresponding to the value;

receiving a request for the value secured in the key management system from a requesting application, wherein the request comprises the key;

in response to the request for the value, searching for the key in the decoded key list;

determining the key corresponding to the value is in the decoded key list;

obtaining an encrypted tuple, encrypted using a key encryption key associated with a key decryption key, from the key management system using the key, wherein the encrypted tuple comprises the key and the value;

obtaining a tuple corresponding to the value by decrypting the encrypted tuple using the key decryption key;

and providing the tuple corresponding to the value to the requesting application.

2. The computer readable medium of claim 1, wherein the encoded key list is stored in a key management storage located on a second server.

3. The computer readable medium of claim 1, wherein the key management system comprises a graphical user interface.

4. A key management system comprising:

a processor;

a memory comprising computer executable instructions for retrieving a value secured in the key management system, the instructions, when executed, causing the processor to perform method steps of;

obtaining a decoded key list by decoding an encoded key list, wherein the decoded key list comprises a key corresponding to the value;

receiving a request for the value secured in the key management system from a requesting application, wherein the request comprises the key;

searching for the key in the decoded key list in response to the request for the value;

determining the key corresponding to the value is in the decoded key list;

obtaining an encrypted tuple, encrypted using a key encryption key associated with a key decryption key, from the key management system using the key, wherein the encrypted tuple comprises the key and the value;

obtaining a tuple corresponding to the value by decrypting the encrypted tuple using a key decryption key; and

providing the tuple corresponding to the value to the requesting application.

5. The apparatus of claim 4, wherein the encoded key list is stored in a key management storage located on a second server.

6. The apparatus of claim 4, wherein the key management system comprises a graphical user interface.