Managing access to data
A method including determining an assigned key pair associated with a device, the assigned key pair including an assigned public key and an associated assigned private key; determining an access key pair associated with content to be encrypted, the access key pair including an access public key and an associated access private key; encrypting the access private key using a combination encryption key determined based at least in part on the access private key and the assigned public key; encrypting a randomly generated key by utilizing the access public key; and encrypting the content utilizing the randomly generated key. Various other aspects are contemplated.
1. A method, comprising:
determining, by a first device associated with a registered account, an assigned key pair including an assigned public key and an associated assigned private key;
determining, by the first device, an access key pair including an access public key and an associated access private key;
encrypting, by the first device, the access private key using a combination encryption key determined based at least in part on the access private key and the assigned public key;
encrypting, by the first device, content by utilizing a randomly generated key;
decrypting, by a second device associated with the registered account, the access private key based at least in part on determining a combination decryption key, which is associated with the combination encryption key; and
decrypting, by the second device, the content based at least in part on determining the randomly generated key by utilizing the access private key.
2. The method of claim 1 , wherein the combination encryption key and the combination decryption key are the same.
3. The method of claim 1 , wherein the randomly generated key is a symmetric key.
4. The method of claim 1 , wherein the assigned public key and the assigned private key are associated with the registered account.
5. The method of claim 1 , wherein the access public key and the access private key are specific to the content.
6. The method of claim 1 , further comprising:
encrypting, by the first device, the randomly generated key by utilizing the access public key; and
decrypting, by the second device, the randomly generated key by utilizing the access private key.
7. The method of claim 1 , wherein the first device is different from the second device.
8. A system, comprising:
a first device associated with a registered account, the first device configured to:
determine an assigned key pair including an assigned public key and an associated assigned private key;
determine an access key pair including an access public key and an associated access private key;
encrypt the access private key using a combination encryption key determined based at least in part on the access private key and the assigned public key; and
encrypt content by utilizing a randomly generated key; and
a second device associated with the registered account, the second device configured to:
decrypt the access private key based at least in part on determining a combination decryption key, which is associated with the combination encryption key; and
decrypt the content based at least in part on determining the randomly generated key by utilizing the access private key.
9. The system of claim 8 , wherein the combination encryption key and the combination decryption key are the same.
10. The system of claim 8 , wherein the randomly generated key is a symmetric key.
11. The system of claim 8 , wherein the assigned public key and the assigned private key are associated with the registered account.
12. The system of claim 8 , wherein the access public key and the access private key are specific to the content.
13. The system of claim 8 , wherein
the first device is configured to encrypt the randomly generated key by utilizing the access public key; and
the second device is configured to decrypt the randomly generated key by utilizing the access private key.
14. The system of claim 8 , wherein the first device is different from the second device.
15. A non-transitory computer-readable medium configured to store instructions, which when executed by a first processor associated with a first device, configure the first processor to:
determine an assigned key pair including an assigned public key and an associated assigned private key;
determine an access key pair including an access public key and an associated access private key;
encrypt the access private key using a combination encryption key determined based at least in part on the access private key and the assigned public key; and
encrypt content by utilizing a randomly generated key; and
when executed by a second processor associated with a second device, configure the second processor to:
decrypt the access private key based at least in part on determining a combination decryption key, which is associated with the combination encryption key; and
decrypt the content based at least in part on determining the randomly generated key by utilizing the access private key.
16. The non-transitory computer-readable medium of claim 15 , wherein the combination encryption key and the combination decryption key are the same.
17. The non-transitory computer-readable medium of claim 15 , wherein the randomly generated key is a symmetric key.
18. The non-transitory computer-readable medium of claim 15 , wherein the assigned public key and the assigned private key are associated with the registered account.
19. The non-transitory computer-readable medium of claim 15 , wherein the access public key and the access private key are specific to the content.
20. The non-transitory computer-readable medium of claim 15 , wherein
the first processor is configured to encrypt the randomly generated key by utilizing the access public key; and
the second processor is configured to decrypt the randomly generated key by utilizing the access private key.