The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jun. 28, 2022

Filed:

Sep. 24, 2020
Applicant:

Oracle International Corporation, Redwood Shores, CA (US);

Inventors:

Amit Agarwal, Milpitas, CA (US);

Rohit Koul, Sunnyvale, CA (US);

Srikant Krishnapuram Tirumalai, Milpitas, CA (US);

Jie Wang, Beijing, CN;

Xinnong Wang, Beijing, CN;

Assignee:

Oracle International Corporation, Redwood Shores, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 9/08 (2006.01);
U.S. Cl.
CPC ...
H04L 9/0891 (2013.01); H04L 9/0822 (2013.01); H04L 9/0894 (2013.01);
Abstract

An example method facilitates enabling Key Encryption Key (KEK) rotation for a running multi-tenant system without requiring system downtime or interruption. The example method facilitates decrypting a set of one or more DEKs using a preexisting KEK; using a new KEK to re-encode the DEKs using the new KEK, all while simultaneously enabling servicing of tenant requests. This is enabled in part, by strategic caching of tenant DEKs in a secure local memory, wherein the cached tenant DEKs are maintained in the clear and are readily accessible to running processes that are using the DEKs to decrypt and access tenant data, irrespective of the state of a background process used to implement the KEK rotation to the new KEK.


Find Patent Forward Citations

Loading…