Patent ID: 11929992
Assignee: SOPHOS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 1:
2. A method comprising:
instrumenting an application programming interface on a compute instance to detect access to a decryption service used by an operating system of the compute instance;
detecting a call from a first process executing on the compute instance to the application programming interface to unprotect a key used to cryptographically secure a secret on the compute instance;
comparing first process information for the first process to second process information for one or more other processes associated with the secret;
in response to determining that the first process is an authorized user of the secret, permitting the first process to decrypt the key for use in accessing the secret; and
in response to determining that the first process is not an authorized user of the secret, preventing the first process from decrypting the key for use in accessing the secret.