Patent ID: 9722974
Date: 2017-08-01
CPC Classifications: H04L

Claim:
1. A computer-implemented method of re-encrypting data, the method comprising: by execution of program instructions by one or more computing devices: receiving, from a requesting device separate from the one or more computing devices, a first request to encrypt data; encrypting the data using a first key that is not accessed by the requesting device; generating a key identifier associated with the first key; transmitting, to the requesting device, the encrypted data and the key identifier; receiving, from the requesting device, a second request to re-encrypt the encrypted data, wherein the second request comprises the encrypted data and the key identifier; determining that the key identifier is associated with the first key and that the first key is exhausted; generating a second key at least partly in response to determining that the first key is exhausted; decrypting the encrypted data using the first key to generate a decrypted version of the encrypted data; encrypting, using the second key, the decrypted version of the encrypted data to generate a re-encrypted version of the encrypted data; associating the key identifier with the second key; and transmitting, to the requesting device, the re-encrypted version of the data.