Patent ID: 9608809
Date: 2017-03-28
CPC Classifications: G06F,H04L

Claim:
1. A method for enrolling a user of an electronic computing device in a multi-party encryption and key management system, comprising the steps of: receiving, at a server, an enrollment request from the electronic computing device corresponding to a user of the electronic computing device for enrollment in the multi-party encryption and key management system, the enrollment request comprising identity data corresponding to the user and routing data for routing the enrollment request, wherein at least the identity data is encrypted and the identity data comprises unique cryptographic information corresponding to the enrollment request; determining, based on the routing data, a key space corresponding to a tenant affiliated with the user; transmitting the enrollment request from the server to a key service corresponding to the determined key space; receiving, at the server, a response from the key service, wherein the response comprises a user identifier, a tenant-specific device identifier, and cryptographic enrollment data for enrolling the user, wherein the response was generated at the key service based on the encrypted identity data, and wherein the cryptographic enrollment data was encrypted by the key service using the unique cryptographic information corresponding to the enrollment request prior to transmission to the server; and transmitting the cryptographic enrollment data and tenant-specific device identifier from the server to the electronic computing device for enrollment of the user with the multi-party encryption and key management system.