Patent ID: 9251337
Filing Date: 2016-02-02
CPC Classification: G06F

Claim Text:
1. A computer program product, the computer program product including a non-transitory computer readable storage medium having program instructions for embedding a handle of a module-centric commodity cryptographic service provider within host-opaque region of a host-centric stateless application programming interface embodied therewith, the program instructions executable by a processor to cause: receiving the handle by a handle-oriented host library associated with the host-centric application programming interface; transforming the handle into a hardware security module readable object by associating the handle with a host-resident key token of the handle-oriented host library to produce a transformed handle by the handle-oriented host library, the host-resident key token comprising host-opaque data, the transformed handle being associated with the host-opaque data; selecting, in a stateless host library, a target hardware security module from a plurality of hardware security modules, in accordance with the transforming of the handle and based on object characteristics of the plurality of hardware security modules; passing the transformed handle to module-centric stateful modules of the module-centric commodity cryptographic service provider, each module-centric stateful module including a wrapping key accessible by the target hardware security module of the stateless host library; dispatching, by the module-centric commodity cryptographic service provider, the transformed handle to a virtualized handle in host token recovery of the stateless host library as a module identifier to a handle database, and to a stateless module having a master key; retrieving a virtualized handle in the stateless host library; de-serializing a serialized state of the handle in the target hardware security module based on the transforming of the handle into the hardware security module readable object; restoring a serialized state of the target hardware security module by passing the handle back to a host token recovery of the stateless host library, wherein the serialized state is restored from the virtualized handle; and wherein with respect to dispatching, by the module-centric commodity cryptographic service provider, the transformed handle, the program instructions are further executable by the processor to cause: