Patent ID: 9215064
Filing Date: 2015-12-15
Classification: H04L

Abstract:
1. A method comprising: establishing a session between a server and a remote client; generating a session key portion for the session and a client key portion for the remote client; encrypting client data received from the remote client during the session using a combined encryption key generated from a static key portion accessible by the server, the session key portion, and the client key portion; associating the session key portion with the session; storing the session key portion and the encrypted client data in a location inaccessible to the remote client, wherein the session key portion and the encrypted client data are accessible to the server and used for subsequent transactions between the server and an additional server during the session; providing the client key portion to the remote client; deleting the client key portion from the server; determining, subsequent to deleting the client key portion from the server, that a subsequent transaction between the server and the additional server involves providing decrypted client data from the server to the additional server; and responsive to determining that the subsequent transaction involves providing the decrypted client data from the server to the additional server: