Park, Vaughan, Fleming & Dowler LLP
Method and apparatus for managing cryptographic keys
One embodiment of the present invention provides a system for managing keys. During operation, the system authenticates a client at a key manager. Next, the system receives a token from the client at the key manager, wherein the token is associated with a customer key, and includes a token authenticator. This token authenticator comprises one-half of an authenticator pair which is used to determine if the client is the owner of the customer key. Next, the system decrypts the token using a master key. The system then verifies a client authenticator, which comprises the other half of the authenticator pair which is used to determine if the client is the owner of the customer key. If the client is the owner of the customer key, the system sends the customer key to the client, which enables the client to encrypt/decrypt data. Finally, the client deletes the customer key.
Oracle International Corporation
H H H H H
H04L H04L H04L H04L H04L
inventional inventional inventional inventional inventional
Min-Hank Daniel ManHung Paul Chon Hei
Ho Wong Youn Lei