US 12,425,211 B2
Key management cache synchronization
Ryan K. Cradick, Oronoco, MN (US); John A. Riendeau, Madison, WI (US); and Paul Gerver, Rochester, MN (US)
Assigned to International Business Machines Corporation, Armonk, NY (US)
Filed by International Business Machines Corporation, Armonk, NY (US)
Filed on Jun. 8, 2023, as Appl. No. 18/207,396.
Prior Publication US 2024/0413980 A1, Dec. 12, 2024
Int. Cl. H04L 9/08 (2006.01)
CPC H04L 9/0894 (2013.01) [H04L 9/0825 (2013.01); H04L 9/083 (2013.01); H04L 9/0891 (2013.01); H04L 9/0822 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method, in a data processing system, of encryption key management for containerized applications, the method comprising:
receiving, by an application container, a request directed to a first wrapped data encryption key (WDEK);
determining whether a local encryption key cache associated with the application container stores an entry having a mapping of the first WDEK to a first unwrapped data encryption key (DEK);
in response to the local encryption key cache not storing the entry, accessing a shared list data structure that stores entries corresponding to WDEKs to be synchronized among a plurality of local encryption key caches of a set of application containers, to determine a set of WDEKs that are missing from the local encryption key cache;
obtaining, from a key management service, the WDEKs and corresponding DEKs for the set of WDEKs that are missing from the local encryption key; and
updating the shared list data structure and the local encryption key cache based on the WDEKs and DEKs obtained from the key management service, to thereby synchronize the local encryption key cache with the shared list data structure.