Patent ID: 9690954
Date: 2017-06-27
CPC Classifications: G06F,H04L

Claim:
1. A method comprising: receiving, by a computing device, a request to decrypt at least a first portion of a data storage encrypted using a first key; retrieving, by the computing device, a first encryption secret from a first location and a second encryption secret from a second location; generating, by the computing device, a second key using the first and second encryption secrets, the second key being different from the first key; decrypting, by the computing device, a second portion of the data storage using the second key, wherein the second portion of the data storage stores a first copy of the first key; receiving, by the computing device, a request to decrypt a third portion of the data storage encrypted using a received shared secret, wherein the third portion of the data storage stores a second copy of the first key, and wherein the shared secret is different than the second key; and decrypting, by the computing device, the at least a first portion of the data storage using either the first or second copy of the first key.