US 12,306,802 B2
Hierarchical key management for cross-region replication
Vikram Singh Bisht, Seattle, WA (US); Satish Kumar Kashi Visvanathan, San Jose, CA (US); Haoran Qi, San Francisco, CA (US); and Viggnesh Venugopal, Santa Clara, CA (US)
Assigned to Oracle International Corporation, Redwood Shores, CA (US)
Filed by Oracle International Corporation, Redwood Shores, CA (US)
Filed on Jan. 6, 2023, as Appl. No. 18/094,302.
Claims priority of provisional application 63/378,486, filed on Oct. 5, 2022.
Claims priority of provisional application 63/412,243, filed on Sep. 30, 2022.
Claims priority of provisional application 63/357,526, filed on Jun. 30, 2022.
Claims priority of provisional application 63/352,992, filed on Jun. 16, 2022.
Prior Publication US 2023/0412375 A1, Dec. 21, 2023
Int. Cl. H04L 9/14 (2006.01); G06F 9/50 (2006.01); G06F 16/11 (2019.01); G06F 16/174 (2019.01); G06F 16/176 (2019.01); G06F 16/178 (2019.01); G06F 16/182 (2019.01); G06F 16/185 (2019.01); G06F 16/22 (2019.01); G06F 16/23 (2019.01); G06F 16/27 (2019.01); G06F 21/60 (2013.01); G06F 21/62 (2013.01); H04L 9/08 (2006.01)
CPC G06F 16/1844 (2019.01) [G06F 9/505 (2013.01); G06F 16/128 (2019.01); G06F 16/1756 (2019.01); G06F 16/1774 (2019.01); G06F 16/178 (2019.01); G06F 16/185 (2019.01); G06F 16/2246 (2019.01); G06F 16/2365 (2019.01); G06F 16/27 (2019.01); G06F 21/602 (2013.01); G06F 21/6218 (2013.01); H04L 9/0894 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method, comprising:
generating, by a computing device, a first security key associated with a source file system, based at least in part on a first master key, for encrypting and decrypting a plurality of file keys in the source file system, the source file system being configured to send snapshot deltas during a replication process, and the snapshot deltas being identified between two snapshots of the source file system;
generating, by the computing device, a second security key associated with a target file system, based at least in part on a second master key, for encrypting and decrypting a plurality of file keys in the target file system, the target file system being configured to receive the snapshot deltas during the replication process; and
generating, by the computing device, a session key, based at least in part on a third master key, for encrypting and decrypting the snapshot deltas transferred between the source file system and the target file system during the replication process, the session key being valid for a session;
wherein the first master key, the second master key, and the third master key are different keys.