US 12,010,232 B2
User-friendly, secure and auditable cryptography administration system
Mihir Patil, New York, NY (US); Hugo Dobbelaere, Paris (FR); Yeong Wei Wee, Singapore (SG); Maia Hamin, Amherst, MA (US); Piotr Kraus, London (GB); Yurii Mashtalir, Paris (FR); Hussein Farah, London (GB); Alexander Galimberti, London (GB); Caterina Wanka, Munich (DE); Lukas Czypulovski, Munich (DE); Juraj Micko, Baska (SK); and Nezihe Pehlivan, London (GB)
Assigned to Palantir Technologies Inc., Denver, CO (US)
Filed by Palantir Technologies Inc., Denver, CO (US)
Filed on Oct. 15, 2021, as Appl. No. 17/502,624.
Claims priority of application No. 21315191 (EP), filed on Sep. 30, 2021.
Prior Publication US 2023/0100790 A1, Mar. 30, 2023
Int. Cl. H04L 9/08 (2006.01); G06F 21/10 (2013.01); H04L 9/32 (2006.01)
CPC H04L 9/3215 (2013.01) [G06F 21/10 (2013.01); H04L 9/0861 (2013.01); H04L 9/0894 (2013.01); H04L 2209/60 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computing system configured to provide a cryptography administration system, the computing system comprising:
a computer readable storage medium having program instructions embodied therewith; and
one or more processors configured to execute the program instructions to cause the computing system to:
display, via an interactive user interface, a raw data set including a plurality of raw data values;
receive, via the interactive user interface, a user selection of one or more of the raw data values;
receive, via the interactive user interface, a user selection of a cryptography algorithm;
generate one or more cryptography keys;
initiate generation of a channel associated with the selected cryptography algorithm and the one or more cryptography keys, wherein the channel is accessible by a plurality of front-end applications to facilitate encryption and decryption operations;
generate a channel identifier associated with the channel, the channel identifier comprising a pointer configured to access a location in storage associated with the channel, the location in storage comprising the one or more cryptography keys;
generate one or more encrypted data values by encrypting the one or more selected raw data values based, at least in part, on the selected cryptography algorithm associated with the channel, the one or more encrypted data values comprising the channel identifier;
receive, via the interactive user interface, a user input of a third-party user;
generate a license comprising one or more permissions of the third-party user to perform decryption operations on the encrypted data values via a front-end application that accesses the channel to initiate said decryption operations; and
store the license in the location in storage accessible by the pointer as part of the channel identifier.