Patent ID: 9660801
Date: 2017-05-23
CPC Classifications: H04L

Claim:
1. A method for key management in an as-a-service (aaS) context, the method comprising the steps of: (a) upon receiving a creation request in a provider computing-environment, creating a specific key in at least one location in said provider computing-environment by repetitively computing respective specific-key contributions: (b) applying said respective specific-key contributions to change a specific-key value in said computing resources, wherein said respective specific-key contributions are never revealed in unencrypted form to any of said computing resources, and to any of said customer locations, other than respective creation-request contributors associated with said respective specific-key contributions during request initiation; wherein said at least one location is a region of memory located in a given computing resource of said set of N computing resources, operationally connected to said provider computing-environment, wherein said customer locations are regions of memory located in a given computing resource of said set of M customer locations, operationally connected to said customer computing-environment, wherein said provider computing-environment is a computing environment of an aaS service provider, wherein said customer computing-environment is a computing environment of a customer of said aaS service provider, and wherein said provider computing-environment and said customer computing-environment are configured to exchange data with each other.