Patent ID: 8200972

Claim:
A method for processing data, comprising: at a client computer including a processor, storing connections having different security properties that identify different security-sensitive portions of data to be encrypted, wherein each of the connections allows applications at the client computer to access data sources at a server computer, and wherein each of the connections has an associated client encryption seed, client encryption token, server encryption seed, and server encryption token; receiving a request from an application to access a data source, wherein the request has associated security properties that identify security-sensitive portions of data to be encrypted; in response to the client computer requesting establishment of a connection on behalf of the application, determining, at the client computer, whether there is a stored connection that used a same set of security properties as are associated with the request from the application and that connected to the data source that the application requests access to based on the security-sensitive portions of data to be encrypted associated with the request and the security-sensitive portions of data to be encrypted associated with each stored connection; in response to determining that there is a stored connection that used the same set of security properties and that connected to the data source, re-using the client encryption seed, the client encryption token, the server encryption seed, and the server encryption token associated with the connection; and in response to determining that there is not a connection that used the same set of security properties and that connected to the data source, generating a new client connection key, a new client encryption seed, a new client encryption token, a new sever connection key, a new server encryption seed, and a new server encryption token.