×

Redundant key management

  • US 9,251,097 B1
  • Filed: 06/17/2013
  • Issued: 02/02/2016
  • Est. Priority Date: 03/22/2011
  • Status: Active Grant
First Claim
Patent Images

1. A computer-implemented method, comprising:

  • under the control of one or more computer systems configured with executable instructions,receiving data objects from customers of a data storage service;

    for each data object of at least a plurality of the data objects;

    storing the data object in an intermediate data storage subsystem;

    prior to removing the data object from the intermediate data storage subsystem to a persistent data storage subsystem, providing, to a customer associated with the data object, an identifier for the data object that includes, in encrypted form, information usable to retrieve the data object after the data object is removed from the intermediate data storage subsystem;

    generating a first cryptographic key for the data object;

    encrypting the data object using the first cryptographic key;

    causing the first cryptographic key to be encrypted using a second cryptographic key; and

    redundantly storing, in the persistent data storage subsystem, the encrypted data object and the encrypted first cryptographic key using a plurality of data storage devices used by the data storage service to persistently store the received data objects, wherein redundantly storing the encrypted data object includes storing a plurality of shards such that each shard of the plurality of shards is stored in a different data storage device of the plurality of data storage devices, the plurality of shards generated by applying a redundancy encoding scheme to the data object and encrypted using the first cryptographic key after applying the redundancy encoding scheme;

    encrypting the second cryptographic key using a third cryptographic key; and

    redundantly storing the encrypted second cryptographic key among the plurality of data storage devices.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×