Patent ID: 11930109
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 9:
10. A computer program product, the computer program product comprising: one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions comprising:
program instructions to encrypt data using an encryption key, wherein the encryption key is associated with a set of unique key identifiers that are usable to restrict access to a subset of privileges associated with decryption of the data using the encryption key, wherein one of the key identifiers allows access to all of the data encrypted with encryption key, wherein another of the key identifiers allows access to only a portion of the data encrypted with the encryption key;
program instructions to provide a storage system with the set of key identifiers, wherein each key identifier is associated with information specifying a respective storage location the key identifier is authorized for when processing a request to decrypt the encrypted data located at the respective storage location using the encryption key; and
program instructions to send at least one key identifier of the set of key identifiers to the storage system with a data access request, wherein the storage system is configured to determine whether the data access request is authorized for the at least one key identifier.