Granted Patent B2

US 12,598,060 · App. 17/472,644 · Granted Apr 7, 2026

Inventors: John Kennedy (Los Olivos, CA); Prasanna Kumar Malaiyandi (Santa Clara, CA); Karthik Raman (New York, NY); Jan Zila (Seattle, WA)

Assignee: Zoom Communications, Inc.

H04L9/0827H04L9/083H04L9/0833H04L9/0894H04L63/062H04L63/065

Abstract

Claims (71)

1 . A method comprising:

receiving an encryption request from a first server that includes an identifier for one or more users, wherein the identifier includes at least one of a customer identification number, a host email address, or a telephone number;

selecting a key management server based on the identifier;

transmitting a request for a data encryption key to the selected key management server;

receiving a plaintext key and an encrypted key from the key management server;

in response to the encryption request, transmitting the plaintext key and the encrypted key to the first server; and

deleting the plaintext key.

2 . The method of claim 1 , comprising:

encrypting a recording of a conference conducted by the first server using the plaintext key to obtain an encrypted recording; and

storing the encrypted recording with the encrypted key in non-volatile memory.

3 . The method of claim 1 , comprising:

encrypting a recording of a phone call conducted by the first server using the plaintext key to obtain an encrypted recording; and

storing the encrypted recording with the encrypted key in non-volatile memory.

4 . The method of claim 1 , comprising:

encrypting a voicemail received by the first server using the plaintext key to obtain an encrypted recording; and

storing the encrypted recording with the encrypted key in non-volatile memory.

5 . The method of claim 1 , comprising:

encrypting a calendar token generated by the first server using the plaintext key to obtain an encrypted token; and

storing the encrypted token with the encrypted key in non-volatile memory.

6 . The method of claim 1 , comprising:

encrypting a recording of a webinar conducted by the first server using the plaintext key to obtain an encrypted recording; and

storing the encrypted recording with the encrypted key in non-volatile memory.

7 . The method of claim 1 , comprising:

configuring the key management server to generate data keys; and

associating the key management server with a group of one or more users.

8 . The method of claim 1 , comprising:

receiving an encryption algorithm identifier from the key management server; and

selecting an encryption algorithm to be applied with the plaintext key based on the encryption algorithm identifier.

9 . The method of claim 1 , comprising:

receiving a destination address from the key management server; and

storing the encrypted key and data encrypted with the plaintext key in non-volatile memory at the destination address.

10 . The method of claim 1 , wherein the first server is a media server configured to host conference software.

11 . The method of claim 1 , wherein the first server is part of a UCaaS system configured to support multiple modes of communication via one or more electronic communications networks.

12 . The method of claim 1 , wherein selecting the key management server comprises:

selecting the key management server based on an indication, included in the encryption request, of a type of data to be encrypted.

13 . The method of claim 1 , wherein selecting the key management server comprises:

selecting the key management server based on an indication, included in the encryption request, of a geographic region associated with data to be encrypted.

14 . The method of claim 13 , wherein the indication of the geographic region is an internet protocol address.

15 . The method of claim 1 , wherein the key management server is a first key management server, the plaintext key is a first plaintext key, and the encrypted key is a first encrypted key, comprising:

selecting a second key management server based on the identifier;

transmitting a request for a data encryption key to the second key management server;

receiving a second plaintext key and a second encrypted key from the second key management server;

in response to the encryption request, transmitting the second plaintext key and the second encrypted key to the first server;

encrypting data accessed by the first server using the first plaintext key and using the second plaintext key to obtain an encrypted data; and

storing the encrypted data with the first encrypted key and the second encrypted key in non-volatile memory; and

deleting the second plaintext key.

16 . A system comprising:

a network interface,

a processor, and

a memory, wherein the memory stores instructions executable by the processor to:

receive an encryption request from a first server that includes an identifier for one or more users, wherein the identifier includes at least one of a customer identification number, a host email address, or a telephone number;

select a key management server based on the identifier;

transmit, using the network interface, a request for a data encryption key to the selected key management server;

receive, using the network interface, a plaintext key and an encrypted key from the key management server;

in response to the encryption request, transmit the plaintext key and the encrypted key to the first server; and

delete the plaintext key.

17 . The system of claim 16 , wherein the first server is configured to:

encrypt a recording of a conference conducted by the first server using the plaintext key to obtain an encrypted recording; and

store the encrypted recording with the encrypted key in non-volatile memory.

18 . The system of claim 16 , wherein the memory stores instructions executable by the processor to:

receive, using the network interface, a destination address from the key management server; and

store the encrypted key and data encrypted with the plaintext key in non-volatile memory at the destination address.

19 . A method comprising:

receiving a decryption request from a first server that includes an identifier for one or more users and an encrypted key, wherein the identifier includes at least one of a customer identification number, a host email address, or a telephone number;

selecting a key management server based on the identifier;

transmitting a request for a data encryption key to the selected key management server, wherein the request includes the encrypted key;

receiving a plaintext key from the key management server;

in response to the decryption request, transmitting the plaintext key to the first server; and

deleting the plaintext key.

20 . The method of claim 19 , comprising:

decrypting an encrypted recording of a conference conducted by the first server using the plaintext key to obtain a decrypted recording.

Assignments (2)

Continuity (1)

References Cited (31)