Sap Se

Sap Ag

Klaus Kiefer

Juergen Kremp

Uwe Bauer

Kathrin Nos

Bjoern Friedmann

Juergen Schneider

Michael Engler

Ralf Miko

Maik Mueller

Michael Freidrich

The present disclosure describes methods, systems, and computer program products for providing a deployment of applications across a distributed network environment. A computer-implemented method comprises: receiving, at a server and from a client device, a first request including an identifier of a configuration file accessible to the server and one or more identifiers for one or more resources operated by a remote resource server, wherein the resources are requested by an application executed on the client device; in response to the request, retrieving, by the server, one or more tokens associated with the requested resources; transmitting, by the server, a second request to the remote resource server, the second request including the tokens and identifying one or more data processing tasks to be performed by the resources for the application; and receiving, by the server and from the remote resource server, result data that was outputted by the resources executing the data processing tasks.

Reusable application configuration with dynamic resource determination

An improved key encryption system is provided for encrypting sensitive data on a shared data store. Various embodiments contemplate a system where a plurality of data clients are connected to one or more shared data stores. A secure data storage facility is provided on one or more of the shared data stores by using an encryption scheme. Encryption keys for decrypting the sensitive data are stored on the same data store as sensitive data, which may be decrypted using the encryption keys. To provide another layer of security, the data encryption keys are themselves encrypted using a key encryption key ('KEK'), which is generated by, and stored in a local data store associated with the data clients.

Encryption scheme in a shared data store

An improved key encryption system is provided for encrypting sensitive data on a shared data store. Various embodiments contemplate a system where a plurality of data clients are connected to one or more shared data stores. A secure data storage facility is provided on one or more of the shared data stores by using an encryption scheme. Encryption keys for decrypting the sensitive data are stored on the same data store as sensitive data which may be decrypted using the encryption keys in question. To provide another layer of protection, the data encryption keys are themselves encrypted using a key encryption key (KEK), which is generated by, and stored in a local persistent data store associated with the data clients.

Shared encrypted storage

A process and system for generating a pseudo-random number is presented. Input data having entropy is gathered in an Entropy Pool and transformed once by a cryptographic hash function. The transformed data forms the internal state of the pseudo-random number generator. The generator forms the output by applying a second cryptographic hash function to this internal state. Finally, the generator updates the internal state by inputting the current internal state and data from the Entropy Pool into a third cryptographic hash function. The output of the third hash function forms the new internal state of the pseudo-random number generator.

System and method for generating pseudo-random numbers

Growing community of inventors

Heidelberg, Germany

Klaus Kiefer