Abstract: Methods, apparatuses, or computer program products that provide data access authentication for a data partition based on encrypted context associated with a data access request for the data partition. In some examples, a data access request to access data within a partition is received. In some examples, the data access request is associated with an encrypted context for a requesting entity identifier associated with the data access request. In some examples, a partition identifier and an encrypted partition key for the partition are identified based on the data access request. Additionally, a candidate validation partition key for the partition is generated based on the encrypted partition key, the encrypted context, and the partition identifier. In some examples, the candidate validation partition key is validated based on a comparison between the candidate validation partition key and a validation partition key associated with the partition to facilitate processing the data access request.

Abstract: Methods, apparatuses, or computer program products that provide data access authentication for a data partition based on encrypted context associated with a data access request for the data partition. In some examples, a data access request to access data within a partition is received. In some examples, the data access request is associated with an encrypted context for a requesting entity identifier associated with the data access request. In some examples, a partition identifier and an encrypted partition key for the partition are identified based on the data access request. Additionally, a candidate validation partition key for the partition is generated based on the encrypted partition key, the encrypted context, and the partition identifier. In some examples, the candidate validation partition key is validated based on a comparison between the candidate validation partition key and a validation partition key associated with the partition to facilitate processing the data access request.

Abstract: The present invention relates to a computer implemented method, software product and computer system for managing a cryptographic service. The computer implemented method comprises: establishing a pool of encryption materials; periodically updating the pool of encryption materials; and responsive to an encryption request from an encrypting application: selecting encryption materials from the pool; encrypting payload data included in the encryption request using the selected encryption materials; and returning encrypted payload data to the encrypting application.

Abstract: The present invention relates to a computer implemented method, software product and computer system for managing a cryptographic service. The computer implemented method comprises: establishing a pool of encryption materials; periodically updating the pool of encryption materials; and responsive to an encryption request from an encrypting application: selecting encryption materials from the pool; encrypting payload data included in the encryption request using the selected encryption materials; and returning encrypted payload data to the encrypting application.