Patent ID: 11870898
Assignee: WORKDAY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 8:
9. A method for key recovery, comprising:
receiving a request to recover a user private key;
providing, using a processor, a request to a credential issuing authority for a first recovery key share, wherein the request includes a first identification validation credential, and wherein the first recovery key share is encrypted using a credential issuing authority public key associated with the credential issuing authority and is provided to the credential issuing authority;
querying the credential issuing authority for a determination of a trusted organization using the first identification validation credential;
receiving the first recovery key share and an encrypted key request token from the credential issuing authority;
providing a request to the trusted organization for a second recovery key share, wherein the request includes a second identification validation credential, and wherein the second recovery key share is encrypted using a trusted organization public key associated with the trusted organization and is provided to the trusted organization;
receiving the second recovery key share from the trusted organization;
combining the first recovery key share and the second recovery key share to determine a recovered encryption key;
providing to the credential issuing authority the encrypted key request token and a request for an encrypted backup copy of the user private key;
receiving the encrypted backup copy of the user private key from the credential issuing authority; and
determining the user private key using the recovered encryption key and the encrypted backup copy of the user private key.