Patent ID: 9628516
Date: 2017-04-18
CPC Classifications: H04L,H04W

Claim:
1. A non-transitory computer-readable storage medium having computer program instructions recorded thereon for managing data in a computer network environment, the computer program instructions being executable by at least one processor of a trust authority to: receive, from a service provider in the computer network environment, a policy specifying how a piece of data should be treated and a first encryption package of a cryptographic key; verify an integrity of the policy using a digital signature received along with the policy; receive, from the service provider, a message stating that the policy will be followed by the service provider in treating the piece of data; decrypt the first encryption package of the cryptographic key; encrypt the cryptographic key into a second encryption package of the cryptographic key; and transmit, to the service provider and in response to receiving the message from the service provider, the second encryption package of the cryptographic key.