Bank of America Corporation

Praveen Chakravarthy Yedluri

Shyam Acharya

Goli Vittal Surya Narayana

Vishal Prasad Gupta

Swati Pandey

Saurabh Kumar

Ashisa Kumar Nayak

Vittal Surya Narayana Goli

Aspects of the disclosure relate to hierarchical based decryption. A computing platform may receive, from a first user, a request to encrypt a file. The computing platform may generate, for the file, a symmetric key. The computing platform may encrypt, using the symmetric key, the file. The computing platform may receive, from a second user, a request to decrypt the encrypted file. The computing platform may identify a classification of the encrypted file, which may be one of: personal, proprietary, or company related. Based on identifying a proprietary classification, the computing platform may obtain an employee hierarchy corresponding to the first user, compare the second user to the employee hierarchy, and based on identifying that the first user is included in the employee hierarchy: decrypt, using the symmetric key, the encrypted file, and grant the second user access to the file.

Hierarchical based decryption for improved content security

Systems, computer program products, and methods are described herein for implementing enhanced file encryption technique. The present invention is configured to receive a request from a computing device of a user to encrypt a file; encrypt the file using a local file encryption key to generate an encrypted file; transmit, via an encryption engine, a first encryption request to an encryption server to encrypt a first portion of the encrypted file; receive, from the encryption server, an encrypted first portion of the encrypted file based on at least the first encryption request, wherein the first portion of the encrypted file is encrypted by the encryption server using a first file encryption key; append the encrypted first portion of the encryption file with a remaining portion of the encrypted file to generate a final encrypted file; and store the final encrypted file in a data repository.

System for implementing enhanced file encryption technique

A system is provided for secure client-side cryptographic key retrieval using cryptographic key splitting and wrapping. In particular, the system may generate an encryption key that may be wrapped using a wrapping key. The wrapping key may in turn be split into a plurality of parts that may be stored in a distributed manner on a client computing system and a cryptographic database. Furthermore, the wrapping key may be generated using an encryption algorithm that allows the wrapping key to be reconstituted with fewer than all of the plurality of parts. In this way, the system provides a secure way to restrict access to sensitive data to authorized parties.

System for secure client-side cryptographic key retrieval using cryptographic key splitting and wrapping

Growing community of inventors

Hyderabad Telangana, India

Praveen Chakravarthy Yedluri