DYNAMIC CRYPTOGRAPHIC KEY MANAGEMENT FOR HANDLING KEY COMPROMISES IN CACHED DATA AND METADATA: abstract simplified (17714954)

• This abstract for appeared for patent application number 17714954 Titled 'DYNAMIC CRYPTOGRAPHIC KEY MANAGEMENT FOR HANDLING KEY COMPROMISES IN CACHED DATA AND METADATA'

Simplified Explanation

This abstract describes a cryptographic key management system for cached data. It explains that when a request is made to access a data block that is encrypted with an encryption key that has been compromised or destroyed, the system will remove the invalid data block from the cache. The data block will then be re-encrypted with a new encryption key when a new request is made to access the cached data. Any other remaining data blocks that were encrypted with the compromised encryption key will also be removed from the cache according to a defined cache eviction policy.

Original Abstract Submitted

Embodiments of a cryptographic key management system for cached data that efficiently re-encrypts cached data encrypted with a compromised encryption key by receiving a request to access a cached data block encrypted with an original encryption key. Upon determining that the original encryption key is compromised or destroyed, thus resulting in the requested data block being invalid, evicting the requested data block from the cache storing the cached data. The data block is re-encrypted using a new encryption key upon receipt of a new request to access the cached data. Any remaining cached data encrypted with the original encryption key is evicted from the cache through a defined cache eviction policy.