公开(公告)号：US09756022B2

公开(公告)日：2017-09-05

申请号：US14472540

申请日：2014-08-29

Applicant: Box, Inc.

Inventor： Kia Amiri ,  Jeff Queisser ,  Chris Byron ,  Rand Wacker ,  Kevin Babcock

IPC: H04L29/06 ,  H04L9/08 ,  G06F21/60

CPC classification number: H04L63/0428 ,  G06F21/60 ,  H04L9/0822 ,  H04L9/0897 ,  H04L63/06 ,  H04L2209/24 ,  H04L2209/60

Abstract: Systems and methods are disclosed for facilitating remote key management services in a collaborative cloud-based environment. In one embodiment, the remote key management architecture and techniques described herein provide for local key encryption and automatic generation of a reason code associated with content access. The reason code is logged by a hardware security module which is monitored by a remote client device (e.g., an enterprise client) to control a second (remote) layer of key encryption. The remote client device provides client-side control and configurability of the second layer of key encryption.

公开(公告)号：US20160065364A1

公开(公告)日：2016-03-03

申请号：US14670312

申请日：2015-03-26

Applicant: BOX, INC.

Inventor： Kia Amiri ,  Jeff Queisser ,  Chris Byron ,  Rand Wacker ,  Kevin Babcock

IPC: H04L9/08 ,  H04L29/06

CPC classification number: H04L63/0428 ,  G06F21/60 ,  H04L9/0822 ,  H04L9/0897 ,  H04L63/06 ,  H04L2209/24 ,  H04L2209/60

Abstract: Systems and methods are disclosed for facilitating remote key management services in a collaborative cloud-based environment. In one embodiment, the remote key management architecture and techniques described herein provide for local key encryption and automatic generation of a reason code associated with content access. The reason code is logged by a hardware security module which is monitored by a remote client device (e.g., an enterprise client) to control a second (remote) layer of key encryption. The remote client device provides client-side control and configurability of the second layer of key encryption.

Abstract translation: 公开了用于在协作的基于云的环境中促进远程密钥管理服务的系统和方法。 在一个实施例中，本文描述的远程密钥管理架构和技术提供了本地密钥加密和与内容访问相关联的原因代码的自动生成。 原因代码由硬件安全模块记录，硬件安全模块由远程客户端设备（例如，企业客户端）监控以控制密钥加密的第二（远程）层。 远程客户端设备提供第二层密钥加密的客户端控制和可配置性。