Patent ID: 9002012
Filing Date: 2015-04-07
Classification: H04L

Abstract:
1. Apparatus for a computer station to facilitate maintenance of at least a first data file in secure form, said apparatus comprising: a cache configured to store a first assigned time-bounded key associated with the first data file, wherein the first assigned time-bounded key expires after a first time period; a key manager configured to manage storage and retrieval of the first assigned time-bound key stored at the cache, the first assigned time-bound key operable during the first time period; and an access controller configured to control access to an access manager and the cache, and to control to which remotely-stored and operated upon data files that time-bound keys shall be provided, wherein the first assigned time-bound key is associated with and can be used to operate on the first data file before the first time period ends and cannot be used to decrypt the first data file after the first time period ends; and an operator configured to use the first assigned time-bounded key to operate upon the first data file during the first time period, wherein the first assigned time-bounded key cannot be used to decrypt the first data file after the first time period.