Patent ID: 11899812
Assignee: JJD SOFTWARE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 15:
16. A method to provide security for application data, comprising:
providing a middle security layer and a root security layer, each implemented using a separate account or credential;
establishing an encrypted channel between a remote application running in a third party domain and the root security layer;
receiving a query at the middle security layer from the remote application, wherein the query involves specified encrypted private data;
submitting a request to the root security layer from the middle security layer for decrypted data in response to the query;
obtaining a middleware key at the root security layer from the third party domain via the encrypted channel;
hashing the middleware key to generate a middleware key hash;
decrypting a root key stored at the root security layer with the middleware key hash;
creating a compound key from the root key and middleware key at the root security layer;
using the compound key to decrypt the specified encrypted private data, and return decrypted data to the middle security layer;
generating a token at the middle security layer based on the decrypted data; and
returning the token to the remote application.