The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jul. 02, 2024

Filed:

Oct. 25, 2021
Applicant:

Sap SE, Walldorf, DE;

Inventors:

Marc Alexander Roeder, Wiesloch, DE;

Roland Lucius, Wiesbaden, DE;

Vladislav Dexheimer, Heidelberg, DE;

Assignee:

SAP SE, Walldorf, DE;

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04K 1/00 (2006.01); G06F 21/60 (2013.01); H04L 9/00 (2022.01); H04L 9/06 (2006.01); H04L 9/30 (2006.01); H04L 9/32 (2006.01);
U.S. Cl.
CPC ...
H04L 9/0618 (2013.01); G06F 21/602 (2013.01); H04L 9/30 (2013.01); H04L 9/3247 (2013.01);
Abstract

Disclosed herein are system, method, and computer program product embodiments for encrypting and decrypting a sensitive data item using a zero-knowledge encryption protocol. An embodiment operates by receiving a request to decrypt the sensitive data item from a client. The embodiment retrieves the requested sensitive data item from a data store. The embodiment generates a result set by replacing a ciphertext value of the sensitive data item to be stored in the result set with a placeholder identifier. The embodiment retrieves a data encryption key (DEK) block from a DEK manager, wherein the DEK block comprises a DEK associated with the sensitive data item. The embodiment generates and encrypts a cipher ticket comprising the ciphertext value of the sensitive data item. The embodiment then sends the result set, the cipher ticket, and the DEK block to the client for decryption of the ciphertext value of the sensitive data item.


Find Patent Forward Citations

Loading…