Systems, methods, and computer program products for accelerated dynamic protection of data

• US 20020184488A1
• Filed: 06/01/2001
• Published: 12/05/2002
• Est. Priority Date: 06/01/2001
• Status: Active Grant

• Current Assignee: Snap, Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Amini, Lisa, Belknap, William R.
• Granted Patent: US 7,280,658 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

A system, method, and computer product that accelerates encryption and decryption of data while using both a static key and a dynamic key. The present invention eliminates intermediate decryption of data that is transmitted between computer systems. More particularly, encryption efficiency is improved by eliminating decryption of the statically encrypted data while incorporating the advantages of a dynamic key such as enabling rapid change of the dynamic key. The efficiency improvements reduce the computer resources required to protect the data and therefore stronger data encryption may be enabled with the saved computer resources. End-to-end security of the data is maintained without the need for trusted data servers.

Claims

1. A computer system for encrypting and decrypting a data element using a static key and a dynamic key, comprising:

said data element being statically encrypted with said static key;

said data element being dynamically encrypted with said dynamic key; and

said data element being decrypted with said dynamic key and said static key.

2. The computer system of claim 1, wherein encryption with said static key is strong encryption.

3. The computer system of claim 1, wherein encryption with said dynamic key is weak encryption.

4. The computer system of claim 1, wherein:

said data element is encrypted with said static key on a first computer system;

said data element is encrypted with said dynamic key on a second computer system;

said data element is decrypted with said static key and said dynamic key on a third computer system; and

thereby encryption and decryption are distributed between said first computer system, said second computer system, and said third computer system.

5. The computer system of claim 4, wherein said second computer system is untrusted.

6. The computer system of claim 1, wherein:

said data element is encrypted with said static key on a first computer system;

said data element is encrypted with said dynamic key on said first computer system;

said data element is decrypted with said static key and said dynamic key on a second computer system; and

thereby encryption and decryption are distributed between said first computer system and said second computer system.

7. A computer implemented method for encrypting a data element and decrypting said data element using a static key and a dynamic key, comprising:

encrypting said data element with said static key;

encrypting said data element with said dynamic key; and

decrypting said data element with said static key and said dynamic key.

8. The method of claim 7 further comprising strongly encrypting said data element with said static key.

9. The method of claim 7 further comprising weakly encrypting said data element with said dynamic key.

10. The method of claim 7, further comprising:

encrypting said data element with said static key on a first computer system;

transmitting said data element to a second computer system;

encrypting said data element with said dynamic key on said second computer system;

transmitting said data element to a third computer system;

decrypting said data element with said static key and said dynamic key on said third computer system; and

thereby distributing encryption between said first computer system, said second computer system, and said third computer system.

11. The method of claim 7, further comprising:

encrypting said data element with said static key on a first computer system;

encrypting said data element with said dynamic key on said first computer system;

transmitting said data element to a second computer system;

decrypting said data element with said static key and said dynamic key on said second computer system; and

thereby distributing encryption between said first computer system and said second computer system.

12. The method of claim 10, further comprising:

determining when transmission of said data element from said first computer system to said second computer system failed; and

repairing said data element without retransmission of said data.

13. The method of claim 10, further comprising:

determining when transmission of said data element from said second computer system to said third computer system failed; and

repairing said data element without retransmission of said data.

14. The method of claim 11, further comprising:

determining when transmission of said data element from said first computer system to said second computer system failed; and

repairing said data element without retransmission of said data.

16. The article of manufacture of claim 15 further comprising strongly encrypting said data element with said static key.

17. The article of manufacture of claim 15 further comprising weakly encrypting said data element with said dynamic key.

18. The article of manufacture of claim 15, further comprising:

encrypting said data element with said static key on a first computer system;

transmitting said data element to a second computer system;

encrypting said data element with said dynamic key on said second computer system;

transmitting said data element to a third computer system;

decrypting said data element with said static key and said dynamic key on said third computer system; and

thereby distributing encryption between said first computer system, said second computer system, and said third computer system.

19. The article of manufacture of claim 15, further comprising:

encrypting said data element with said static key on a first computer system;

encrypting said data element with said dynamic key on said first computer system;

transmitting said data element to a second computer system;

decrypting said data element with said static key and said dynamic key on said second computer system; and

thereby distributing encryption between said first computer system and said second computer system.

20. The article of manufacture of claim 18, further comprising:

determining when transmission of said data element from said first computer system to said second computer system failed; and

repairing said data element without retransmission of said data.

21. The article of manufacture of claim 18, further comprising:

determining when transmission of said data element from said second computer system to said third computer system failed; and

repairing said data element without retransmission of said data.

22. The article of manufacture of claim 19, further comprising:

determining when transmission of said data element from said first computer system to said second computer system failed; and

repairing said data element without retransmission of said data.

15. An article of manufacture comprising a program storage medium readable by a computer and embodying one or more instructions executable by the computer for causing a computer system to encrypt a data element and decrypt said data element using a static key and a dynamic key, comprising:

encrypting said data element with said static key;

encrypting said data element with said dynamic key; and

decrypting said data element with said static key and said dynamic key.