Ca, Inc.

Other

Computer Associates Think, Inc.

Arcot Systems, Inc.

Robert Roy Allen

John S Wang

Robert A Jerdonek

Tom Wu

James Donald Reno

A method and system for consistent format preserving encryption (C-FPE) are provided to protect data while the data is in a domain while allowing encrypted data to be treated inside the domain as if it were the unencrypted data. The method includes inserting a coupling into a data flow at a perimeter of the domain, and translating a data element from an unprotected data element to a protected data element using the coupling such that the data element is a protected data element within the domain.

Perimeter encryption method and system

A key management system includes secured data stored on a first system secured by a control key stored securely on a key server. The secured data is secured against attacks such as unauthorized use, modification or access, where authorization to access the secured data is determined by knowledge of an access private key of an access key pair. When an authorized user is to access the secured data, the first system generates a request to the key server, signed with the access private key, wherein the request is for a decryption control key and the request includes a one-time public key of a key pair generated by the first system for the request. The first system can decrypt the decryption control key from the response, using a one-time private key. The first system can then decrypt the secured data with the decryption control key remaining secured in transport.

Method and apparatus for cryptographic key storage wherein key servers are authenticated by possession and secure distribution of stored keys

A method and system for consistent format preserving encryption (C-FPE) are provided to protect sensitive data while the sensitive data is in a domain while allowing encrypted sensitive data to be treated inside the domain as if it were the unencrypted sensitive data. The method includes inserting a transparent coupling into a data flow at a perimeter of the domain, and translating a sensitive data element from an unprotected data element to a protected data element using the transparent coupling such that the sensitive data element is a protected data element within the domain.

An inexpensive rack which is mounted on the roof of an automobile. Other objects are then mounted on the rack for transport with the automobile. The rack is an elongate lamination including a pair of opposed soft foamed outer layers, and an inner reinforcing layer therebetween. The reinforcing layer extends outwardly of the soft layers defining end tabular portions which are sandwiched between the car roof and the opposing doors to secure the rack to the vehicle. In a preferred embodiment, a pair of racks are mounted in spaced relation across the automobile roof. An object positioned thereon is secured to the automobile by conventional means of rope, straps, or the like.

Growing community of inventors

Marshall, NC, United States of America

Robert Roy Allen