Google Inc.

Aditya Sinha

Timothy M Dierks

Il-Sung Lee

Ariel Joseph Feldman

Jimmy C Chau

Tianyuan Liu

Sidharth Durgesh Telang

Gregory David Laun

Netanel Keidar

Pedro Henrique Ribeiro Morais E Silva

Hunter James Freyer

Xiaolan Zhang

Xioalan Zhang

Vanessa Reimer

A method for integrating third-party encryption managers with cloud services includes receiving, at data processing hardware, an operation request requesting a cryptographic operation on data comprising an encryption operation or a decryption operation. When the operation is an encryption operation, the method includes transmitting a data encryption key associated with the data to a remote entity. The remote entity encrypts the data encryption key with a key encryption key and transmits the encrypted data encryption key to the data processing hardware. When the operation is a decryption operation, the method includes transmitting the encrypted data encryption key to the remote entity which causes the remote entity to decrypt the encrypted data encryption key with the key encryption key and transmit the decrypted data encryption key and transmit to the data processing hardware.

Integration of third-party encryption key managers with cloud services

Methods, systems, and apparatuses, including computer storage media and hardware security modules, for performing batch cryptography on hardware security modules. A hardware security module can receive a request to perform one or more cryptographic operations. The request can include a batch data structure storing a plurality of data elements. The hardware security module can unbatch the plurality of data elements, perform one or more cryptographic operations on the plurality of data elements to generate a plurality of outputs, generate an output batch data structure storing the plurality of outputs, and transmit the output batch data structure in response to the request. The request and the batch data structure can be formed in accordance with a batch hardware security module application program interface (API) implemented by the hardware security module.

Batch cryptography for hardware security modules

Growing community of inventors

New York, NY, United States of America

Aditya Sinha