Patent ID: 11930109
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A computer-implemented method, comprising:
receiving, by a storage system, encrypted data encrypted with an encryption key;
receiving, by the storage system, a set of at least two key identifiers created for the encryption key, the key identifiers being unique relative to one another, wherein each key identifier is associated with information specifying a storage location for which the respective key identifier is authorized, wherein one of the key identifiers allows access to all of the data encrypted with encryption key, wherein another of the key identifiers allows access to only a portion of the data encrypted with the encryption key;
storing, by the storage system, the encrypted data in at least one storage location;
receiving, by the storage system, one of the key identifiers of the set of key identifiers with a data access request; and
determining, by the storage system, whether the data access request is authorized for the received key identifier.