Secure caching technique for shared distributed caches

1. A method for secure caching in a shared distributed cache shared by a plurality of parties, comprising:

initiating a storage of a value in the shared distributed cache by a first party, the value being information to be stored and obtained by the plurality of parties;

associating a key with the value in a value/key pair;

generating a mask value and encrypting the mask value using a secret key to provide an encrypted mask value and storing the encrypted mask value in a shared distributed cache using a cache key, wherein the encrypted mask value can be retrieved from the cache using the cache key;

encrypting the key in the value/key pair by applying a masking algorithm using the generated mask value resulting in the creation of a secure key;

storing the value in the shared distributed cache using the secure key;

requesting the value from the shared distributed cache by a second party using the key;

computing, by the second party, the secure key by encrypting the key using the same mask value and masking algorithm; and

retrieving, by the second party, the value from the shared distributed cache using the secure key.

2. The method of claim 1 , wherein the mask value is obtained by:

retrieving the encrypted mask value from the shared distributed cache; and

decrypting the encrypted mask value using a secret key.

3. The method of claim 2 , further comprising:

securely distributing the secret key to the plurality of parties.

4. The method of claim 1 , further comprising:

periodically regenerating the mask value.

5. A system for secure caching in a shared distributed cache shared by a plurality of parties, comprising:

a first system configured for

initiating a storage of a value in the shared distributed cache by a first party, the value being information to be stored and obtained by the plurality of parties;

associating a key with the value in a value/key pair;

generating a mask value and encrypting the mask value using a secret key to provide an encrypted mask value and storing the encrypted mask value in a shared distributed cache using a cache key, wherein the encrypted mask value can be retrieved from the cache using the cache key;

encrypting the key in the value/key pair by applying a masking algorithm using the mask value resulting in the creation of a secure key; and

storing the value in the shared distributed cache using the secure key; and

a second system configured for

requesting the value from the shared distributed cache by a second party using the key;

computing the secure key by encrypting the key using the same mask value and masking algorithm; and

retrieving the value from the shared distributed cache using the secure key.

6. The system of claim 5 , wherein the second system is further configured for

retrieving the encrypted mask value from the shared distributed cache; and

decrypting the encrypted mask value using a secret key.

7. The system of claim 6 , wherein the secret key is securely distributed to the plurality of parties.

8. The system of claim 5 , wherein the mask value is periodically regenerated.

9. A computer program product for secure caching in a shared distributed cache shared by a plurality of parties, the computer program product comprising:

a computer usable storage medium having computer usable program code embodied therewith, the computer usable program code comprising:

computer usable program code for initiating a storage of a value in the shared distributed cache by a first party, the value being information to be stored and obtained by the plurality of parties;

computer usable program code for associating a key with the value in a value/key pair;

computer usable program code for generating a mask value and encrypting the mask value using a secret key to provide an encrypted mask value and storing the encrypted mask value in a shared distributed cache using a cache key, wherein the encrypted mask value can be retrieved from the cache using the cache key

computer usable program code for encrypting the key in the value/key pair by applying a masking algorithm using the mask value resulting in the creation of a secure key;

computer usable program code for storing the value in the shared distributed cache using the secure key;

computer usable program code for requesting the value from the shared distributed cache by a second party using the key;

computer usable program code for computing, by the second party, the secure key by encrypting the key using the same mask value and masking algorithm; and

computer usable program code for retrieving, by the second party, the value from the shared distributed cache using the secure key.

10. The computer program product of claim 9 , further comprising:

computer usable program code for periodically regenerating the mask value.