The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Sep. 16, 2014
Filed:
Mar. 27, 2009
Kristin Estella Lauter, Redmond, WA (US);
Mihir Bellare, San Diego, CA (US);
Josh Benaloh, Redmond, WA (US);
Melissa E. Chase, Kirkland, WA (US);
Erik J. Horvitz, Kirkland, WA (US);
Chris Demetrios Karkanias, Sammamish, WA (US);
Kristin Estella Lauter, Redmond, WA (US);
Mihir Bellare, San Diego, CA (US);
Josh Benaloh, Redmond, WA (US);
Melissa E. Chase, Kirkland, WA (US);
Erik J. Horvitz, Kirkland, WA (US);
Chris Demetrios Karkanias, Sammamish, WA (US);
Microsoft Corporation, Redmond, WA (US);
Abstract
The claimed subject matter relates to architectures that can construct a hierarchical set of decryption keys for facilitating user-controlled encrypted data storage with diverse accessibility and hosting of that encrypted data. In particular, a root key can be employed to derive a hierarchical set of decryption keys and a corresponding hierarchical set of encryption keys. Each key derived can conform to a hierarchy associated with encrypted data of the user, and the decryption capabilities of the decryption keys can be configured based upon a location or assignment of the decryption key within the hierarchy. The cryptographic methods can be joined with a policy language that specifies sets of keys for capturing preferences about patterns of sharing. These policies about sharing can themselves require keys for access and the policies can provide additional keys for other aspects of policy and or base-level accesses.