The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Feb. 13, 2018
Filed:
Sep. 11, 2012
Irina Gorbach, Bellevue, WA (US);
Venkatesh Krishnan, Sammamish, WA (US);
Andrey Shur, Redmond, WA (US);
Dmitry Denisov, Bellevue, WA (US);
Lars Kuhtz, Seattle, WA (US);
Sumalatha Adabala, Redmond, WA (US);
Roy Peter D'souza, Bellevue, WA (US);
Michael Entin, Redmond, WA (US);
Michael Ray Clark, Redmond, WA (US);
Gitika Aggarwal Saubhasik, Sammamish, WA (US);
Irina Gorbach, Bellevue, WA (US);
Venkatesh Krishnan, Sammamish, WA (US);
Andrey Shur, Redmond, WA (US);
Dmitry Denisov, Bellevue, WA (US);
Lars Kuhtz, Seattle, WA (US);
Sumalatha Adabala, Redmond, WA (US);
Roy Peter D'Souza, Bellevue, WA (US);
Michael Entin, Redmond, WA (US);
Michael Ray Clark, Redmond, WA (US);
Gitika Aggarwal Saubhasik, Sammamish, WA (US);
Microsoft Technology Licensing, LLC, Redmond, WA (US);
Abstract
Embodiments are directed to securing data in the cloud, securely encrypting data that is to be stored in the cloud and to securely decrypting data accessed from the cloud. In one scenario, an instantiated trust service receives information indicating that a trust server is to be instantiated. The trust service instantiates the trust server, which is configured to store key references and encrypted keys. The trust service receives the public key portion of a digital certificate for each publisher and subscriber that is to have access to various specified portions of encrypted data. A data access policy is then defined that specifies which encrypted data portions can be accessed by which subscribers.