Object-Level Encryption

Organization Name

capital one services, llc

Inventor(s)

Rocky Gray of Fairfax VA (US)

Jeremy Green of Alexandria VA (US)

Justin Bachorik of Silver Spring MD (US)

Irakli Nadareishvili of Wilmington DE (US)

Object-Level Encryption - A simplified explanation of the abstract

This abstract first appeared for US patent application 20240235822 titled 'Object-Level Encryption

The abstract describes a method for object-level encryption and key rotations in a service platform that stores data items organized into asset clusters. The encryption keys are rotated to enhance security.

Data items are organized into asset clusters.
A first content encryption key is set as the active encryption key for an asset cluster.
The active encryption key is encrypted using the master encryption key.
Data items are encrypted using the active encryption key.
Once a threshold number of data items are encrypted, the active encryption key is rotated.
A new encryption key is set as the active encryption key for the asset cluster.
Data items are encrypted using the new active encryption key.

Potential Applications: - Data security in cloud storage systems - Secure communication platforms - Secure data sharing platforms

Problems Solved: - Enhances data security by rotating encryption keys - Protects sensitive information from unauthorized access

Benefits: - Improved data security - Enhanced privacy protection - Efficient key management

Commercial Applications: - Cloud storage providers - Communication service providers - Data sharing platforms

Questions about Object-Level Encryption and Key Rotations: 1. How does object-level encryption differ from traditional encryption methods? 2. What are the key benefits of key rotations in data security?

Frequently Updated Research: - Stay updated on the latest advancements in data encryption technologies and key management systems to ensure optimal security measures are in place.

Original Abstract Submitted

a method, apparatus, system, or computer-readable medium for performing object-level encryption and key rotations is disclosed. a service platform may store data items organized into one or more asset clusters. a first content encryption key may be set as the active encryption key for an asset cluster. the active encryption key may be encrypted using the master encryption key. a first subset of data items may be encrypted using the active encryption key (e.g., the first content encryption key). after the number of data items encrypted using the active encryption key satisfies a threshold value, the first content encryption key may be set as an inactive encryption key and a second content encryption key may be set as the new active encryption key for the asset cluster. a second subset of the plurality of data items may be encrypted using the active encryption key (e.g., the second content encryption key).