Patent ID: 9749130
Date: 2017-08-29
CPC Classifications: H04L

Claim:
1. A method comprising: storing a static key portion at a server for creating combined encryption keys for multiple clients; generating a first session key portion for a first session with a first remote client and a first client key portion for the first remote client; encrypting first client data received from the first remote client during the first session using a first combined encryption key generated from the static key portion, the first session key portion, and the first client key portion; generating a second session key portion for a second session with a second remote client and a second client key portion for the second remote client; encrypting second client data received from the second remote client during the second session using a second combined encryption key generated from the static key portion, the second session key portion, and the second client key portion; providing the first client key portion to the first remote client and the second client key portion to the second remote client and deleting the first and second client key portions from the server; subsequent to deleting the first client key portion from the server: subsequent to deleting the first and second client key portions, invalidating the static key portion responsive to determining that a security breach has occurred with respect to the server during the first and second sessions, wherein invalidating the static key portion invalidates the first and second combined encryption keys.