Patent ID: 9020149
Filing Date: 2015-04-28
Classification: H04L

Abstract:
1. A non-transitory computer-readable medium embodying a program executable in a hardware security module (HSM), comprising: code that establishes a communication session with a client device via a network, the communication session using an authentication credential, the authentication credential authenticating the HSM and facilitating encryption of a portion of the communication session; code that obtains, via the communication session, a service request from the client device, the service request comprising a submitted key and an identifier for a ciphertext record, the ciphertext record comprising ciphertext data and a pre-existing key associated with the ciphertext data; code that generates a comparison of the submitted key and the pre-existing key, the comparison authenticating the client device; code that generates plaintext data based upon the ciphertext data, wherein the comparison indicates the submitted key and the pre-existing key are identical, and the plaintext data is generated using an implementation of a cryptographic algorithm configured with the submitted key, the cryptographic algorithm being specified in the ciphertext record and selected from the group consisting of Advanced Encryption Standard (AES), Triple Data Encryption Algorithm (3-DES), and Skipjack; and code that provides, via the communication session, a service response to the client device, the service response comprising the plaintext data.