Encrypting a credential store with a lockbox
View Patent ↗The present invention is a method, system and apparatus for the encryption of a credential store by using a lockbox mechanism. In a credential store encryption method, a lockbox for a credential store can be retrieved and an encryption key can be selected from among a list of encryption keys in the lockbox. The lockbox can be a local lockbox and the local lockbox can be retrieved from an unencrypted region of the credential store. In any case, subsequent to the retrieval of the lockbox, the credential store can be decrypted with the selected encryption key.
1. A credential store security method comprising the steps of:
retrieving a local lockbox for a credential store;
selecting an encryption key from among a list of encryption keys in said lockbox;
decrypting said credential store with said selected encryption key;
retrieving a global lockbox for said credential store; and,
if said selected encryption key cannot decrypt said credential store, selecting an encryption key from said global lockbox to decrypt said credential store.
2. The method of claim 1 , further comprising the step of replacing said local lockbox with said global lockbox and re-encrypting said credential store if said selected encryption key cannot decrypt said credential store.
3. The method of claim 1 , wherein said first attempting step comprises the steps of:
prompting the user for a password;
receiving said password; and,
attempting to unlock said credential store with a key derived from said password.
4. The method of claim 3 , further comprising the steps of:
creating a new local lockbox;
encrypting said new local lockbox;
replacing a global lockbox with said new local lockbox; and,
encrypting said credential store with said key derived from said password.
5. The method of claim 3 , further comprising the steps of:
receiving said new credential store;
retrieving a new local lockbox for said new credential store
retrieving a lockbox for a credential store;
selecting a new encryption key from among a list of encryption keys in said new local lockbox; and,
decrypting said new credential store with said selected new encryption key.
6. A machine readable storage having stored thereon a computer program for credential store security, the computer program comprising a routine set of instructions which when executed by a machine cause the machine to perform the steps of:
retrieving a local lockbox for a credential store;
selecting an encryption key from among a list of encryption keys in said lockbox;
decrypting said credential store with said selected encryption key;
retrieving a global lockbox for said credential store; and,
if said selected encryption key cannot decrypt said credential store, selecting an encryption key from said global lockbox to decrypt said credential store.
7. The machine readable storage of claim 6 , further comprising an additional set of instructions which when executed by the machine causes the machine to further perform the step of replacing said local lockbox with said global lockbox and re-encrypting said credential store if said selected encryption key cannot decrypt said credential store.
8. The machine readable storage of claim 6 , wherein said first attempting step comprises the steps of:
prompting the user for a password;
receiving said password; and,
attempting to unlock said credential store with a key derived from said password.
9. The machine readable storage of claim 8 , further comprising an additional set of instructions which when executed by the machine causes the machine to further perform the steps of:
creating a new local lockbox;
encrypting said new local lockbox;
replacing a global lockbox with said new local lockbox; and,
encrypting said credential store with said key derived from said password.
10. The machine readable storage of claim 8 , further comprising an additional set of instructions which when executed by the machine causes the machine to further perform the steps of:
receiving said new credential store;
retrieving a new local lockbox for said new credential store
retrieving a lockbox for a credential store;
selecting a new encryption key from among a list of encryption keys in said new local lockbox; and,
decrypting said new credential store with said selected new encryption key.