Ryan M Best

US Patent:

20210344485, Nov 4, 2021

Filed:

May 1, 2020

Appl. No.:

16/864269

Inventors:

- Redmond WA, US
Kartik Tirunelveli KANAKASABESAN - Sammamish WA, US
Laurie Lee LITWACK - North Bend WA, US
Kurt Matthew BRENDON - Redmond WA, US
Ajay Kumar KARANAM - Redmond WA, US
Kiran DORESWAMY - Sammamish WA, US
Ryan Jay BEST - Bothell WA, US

International Classification:

H04L 9/08
H04L 9/14

Abstract:

Double key encryption encrypts sensitive data using a content key, obtains a user public key from a key management service, encrypts the content key using the user public key, and encrypts the result using a cloud service provider key. Data confidentiality is protected efficiently through multilevel encryption and also by utilizing keys that are managed by different entities. Sensitivity labeling allows analytics to track sensitive data without compromising confidentiality. Compliance mechanisms may use attribute-based access control to support storage of sensitive data in a cloud, but only inside a permitted region, and without giving the cloud service provider access to the sensitive data.