Patent ID: 9118639
Filing Date: 2015-08-25
Classification: G06F,H04L

Abstract:
1. A system comprising: a cloud server comprising a first trusted execution environment, the cloud server one of a plurality of cloud servers configured to perform data processing operations for a plurality of clients; a cloud storage device coupled to the cloud server; a root key management (“RKM”) server comprising a key server module, the RKM server configured to sign the key server module using a first private key; and a gateway server configured to provide the signed key server module to the cloud server, the first trusted execution environment configured to verify the key server module using a first public key related to the first private key and to launch the key server module if the key server module verifies, the key server module configured to establish a first secure communication channel between the gateway server and the key server module, and the gateway server configured to provide a first cryptographic key to the key server module via the first secure communication channel.