Patent ID: 9537838
Date: 2017-01-03
CPC Classifications: H04L

Claim:
1. A computer-implemented method for proxy re-encryption of encrypted data stored in a first database of a first server and a second database of a second server, the method being executed using one or more processors and comprising: receiving, by the one or more processors, a first token at the first server from a client-side computing device; determining, by the one or more processors, a first intermediate re-encrypted value based on a first encrypted value and the first token, the first encrypted value being encrypted with a current encryption key, the first token and the current encryption key being each provided by the client-side computing device to the first server and the first token being determined based on the current encryption key that the encrypted value was encrypted with, and a new encryption key configured to revoke the current encryption key; transmitting, by the one or more processors, the first intermediate re-encrypted value to the second server; receiving, by the one or more processors, a second intermediate re-encrypted value at the first server from the second server, the second intermediate re-encrypted value having been provided by encrypting the first encrypted value at the second server based on a second token, the second token being different than the first token, the second token being provided by the client-side computing device to the second server and the second token being determined based on the current encryption key and the new encryption key; determining, by the one or more processors and at the first server, the first encrypted value as a first re-encrypted value based on the first intermediate re-encrypted value and the second intermediate re-encrypted value, such that the first re-encrypted value is encrypted with the new encryption key that revokes the current encryption key; and storing, by the one or more processors, the first re-encrypted value in the first database.