Google Inc.

David Elrom

Xiaolan Zhang

Tao Tao

John L Randolph

Patrick Stahlberg

Il-Sung Lee

August Huber

A method for processing a cryptographic operation request includes receiving, at a hardware security module (HSM), the cryptographic operation request including a cryptographic key and at least one authorization token, determining, by the HSM, whether an access control list (ACL) associated with the cryptographic key of the cryptographic operation request is authorized to govern access to the cryptographic key, and validating, by the HSM, the at least one authorization token. When the at least one authorization token is valid and the ACL is authorized to govern access to the cryptographic key of the cryptographic operation request, the method includes processing, by the HSM, the cryptographic operation request.

Growing community of inventors

Mountain View, CA, United States of America

David Elrom