Granted Patent B2

US 11,748,502 · App. 17/344,547 · Granted Sep 5, 2023

Inventors: Amy Christine Nelson (Round Rock, TX); Chooi Peng Low (Plano, TX)

Assignee: Dell Products L.P.

G06F21/6209G06F21/602H04L9/0643

Abstract

Claims (69)

1. An system, comprising:

a plurality of information handling systems comprising a processor, and a memory;

wherein a first information handling system of the plurality of information handling systems is configured to:

encrypt a document utilizing a symmetric encryption key to produce an encrypted document;

receive an encrypted session encryption key from a second information handling system of the plurality of information handling systems;

decrypt the encrypted session encryption key utilizing a private encryption key associated with a first trusted platform module of the first information handling system to produce a session encryption key;

encrypt a metadata file, which includes the symmetric encryption key, utilizing the session encryption key to produce a first encrypted metadata file; and

provide the first encrypted metadata file to the second information handling system;

wherein the second information handling system is configured to:

decrypt the first encrypted metadata file utilizing the session encryption key to produce the metadata file;

encrypt the metadata file utilizing a public encryption key associated with a second trusted platform module associated with a third information handling system of the plurality of information handling systems to produce a second encrypted metadata file; and

provide the second encrypted metadata file to the third information handling system; and

wherein the third information handling system is configured to:

decrypt the second encrypted metadata file utilizing a private encryption key associated with the second trusted platform module to produce the metadata file; and

decrypt the encrypted document utilizing the symmetric encryption key, from the metadata file, to produce the document.

2. The system of claim 1 ,

wherein the third information handling system includes an agent; and

wherein the agent is configured to:

intercept a read request of the encrypted document;

perform decrypting the encrypted document utilizing the symmetric encryption key, from the metadata file, to produce the document; and

provide the document to an application executing on the third information handling system.

3. The system of claim 2 , wherein the agent includes at least one of a filter driver and a kernel loadable module.

4. The system of claim 1 , wherein the third information handling system is further configured to:

receive the encrypted document via one or more of the first information handling system, the second information handling system, an email, a web server, and a removable memory medium.

5. The system of claim 1 , wherein the first information handling system is further configured to:

generate the symmetric encryption key.

6. The system of claim 1 , wherein the first information handling system is further configured to:

request the session encryption key from the second information handling system.

7. The system of claim 6 , wherein the second information handling system is further configured to:

receive a request for the session encryption key from the first information handling system; and

in response to receiving the request for the session encryption key:

generate the session encryption key; and

provide the session encryption key to the first information handling system.

8. The system of claim 1 , wherein the document includes a word processing document, a spreadsheet document, or a presentation document.

9. The system of claim 1 , wherein the second information handling system stores the public encryption key associated with the second trusted platform module without having to receive the public encryption key associated with the second trusted platform module from the third information handling system.

10. The system of claim 1 ,

wherein the third information handling system includes an application; and

wherein the application is configured to read the document after the third information handling system decrypts the encrypted document utilizing the symmetric encryption key, from the metadata file, to produce the document.

11. A method, comprising:

encrypting, by a first information handling system, a document utilizing a symmetric encryption key to produce an encrypted document;

receiving, by the first information handling system, an encrypted session encryption key from a second information handling system;

decrypting, by the first information handling system, the encrypted session encryption key utilizing a private encryption key associated with a first trusted platform module of the first information handling system to produce a session encryption key;

encrypting, by the first information handling system, a metadata file, which includes the symmetric encryption key, utilizing the session encryption key to produce a first encrypted metadata file;

providing, by the first information handling system, the first encrypted metadata file to the second information handling system;

decrypting, by the second information handling system, the first encrypted metadata file utilizing the session encryption key to produce the metadata file;

encrypting, by the second information handling system, the metadata file utilizing a public encryption key associated with a second trusted platform module associated with a third information handling system to produce a second encrypted metadata file;

providing, by the second information handling system, the second encrypted metadata file to the third information handling system;

decrypting, by the third information handling system, the second encrypted metadata file utilizing a private encryption key associated with the second trusted platform module to produce the metadata file; and

decrypting, by the third information handling system, the encrypted document utilizing the symmetric encryption key, from the metadata file, to produce the document.

12. The method of claim 11 , further comprising:

intercepting, by an agent of the third information handling system, a read request of the encrypted document;

performing, by the agent of the third information handling system, the decrypting the encrypted document utilizing the symmetric encryption key, from the metadata file, to produce the document; and

providing, by the agent of the third information handling system, the document to an application executing on the third information handling system.

13. The method of claim 12 , wherein the agent includes at least one of a filter driver and a kernel loadable module.

14. The method of claim 11 , further comprising:

receiving, by the third information handling system, the encrypted document via one or more of the first information handling system, the second information handling system, an email, a web server, and a removable memory medium.

15. The method of claim 11 , further comprising:

generating, by the first information handling system, the symmetric encryption key.

16. The method of claim 11 , further comprising:

requesting, by the first information handling system, the session encryption key from the second information handling system.

17. The method of claim 16 , further comprising:

receiving, by the second information handling system, a request for the session encryption key from the first information handling system; and

in response to the receiving the request for the session encryption key:

generating, by the second information handling system, the session encryption key; and

providing, by the second information handling system, the session encryption key to the first information handling system.

18. The method of claim 11 , wherein the document includes a word processing document, a spreadsheet document, or a presentation document.

19. The method of claim 11 , wherein the second information handling system stores the public encryption key associated with the second trusted platform module without having to receive the public encryption key associated with the second trusted platform module from the third information handling system.

20. The method of claim 11 , further comprising:

reading, by an application executing on the third information handling system, the document after the decrypting the encrypted document utilizing the symmetric encryption key, from the metadata file, to produce the document.

Assignments (8)

Continuity (1)