Patent ID: 7925023
Filing Date: 2011-04-12
Classification: H04L

Abstract:
1. A method for managing keys, comprising: authenticating a client at a key manager; receiving a token from the client at the key manager, wherein the token indicates whether a customer key upon being decrypted is to be returned to the client or used by the key manager and includes one half of an authenticator pair used to determine whether the client is the owner of the customer key; decrypting the token using a master key; verifying that the client is the owner of the customer key based at least on a client authenticator received from the client, wherein the client authenticator comprises the other half of the authenticator pair; and in response to the token indicating that the customer key upon being decrypted is to be returned to the client, sending the customer key to the client, thereby allowing the client to use the customer key to encrypt or decrypt data.