Patent ID: 9270449
Filing Date: 2016-02-23
CPC Classification: G06F,H04L

Claim Text:
1. A computer-implemented method, the method comprising: obtaining, at a first computing device, a session key for encrypting data that is communicated between a client device and the first computing device; receiving, from the client device, an encrypted request for data, wherein the encrypted request was encrypted by the client device using the session key, and wherein the data being requested is stored on a second computing device that is accessible to the first computing device; sending, to the second computing device and over an independently secure channel between the first computing device and the second computing device, a copy of the session key and the encrypted request for data; receiving, from the second computing device and over the independently secure channel between the first computing device and the second computing device, encrypted data that is responsive to the request, the data responsive to the request having been encrypted by the second computing device using the session key; and sending, to the client device, the encrypted data that is responsive to the request, wherein the client device is configured to decrypt, using the session key, the data that is responsive to the request.