Patent ID: 8745416
Filing Date: 2014-06-03
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for secure third-party data storage, at least a portion of the method being performed by a server-side computing device comprising at least one processor, the method comprising: identifying, at the server-side computing device, a request from a client system to access an encrypted file stored under a user account, wherein the requested access requires decryption of the encrypted file; identifying, in response to the request, an asymmetric key pair designated for the user account that comprises an encryption key and a decryption key, wherein the decryption key has been encrypted with a client-side key that is not stored on the server-side computing device; receiving, at the server-side computing device from the client system, the client-side key; temporarily storing the client-side key on the server-side computing device; decrypting, at the server-side computing device, the decryption key with the client-side key; using the decryption key to access an unencrypted version of the encrypted file; upon accessing the unencrypted version of the encrypted file, removing the client-side key from the server-side computing device.