Abstract: Techniques are described herein for encrypting data using two encryption processes and compressing the data. In one aspect, a device or service may encrypt data according to a first encryption process using a first key. The device may compress the encrypted data and encrypt the compressed encrypted data according to a second encryption process using a second key. The device may store the double encrypted and compressed data in a data database, for example, separate from the two encryption keys. In one aspect, each encryption process may include an AES_256 or other encryption process, associated with different keys. The device may compress the encrypted data using ZLIB or other compression techniques.

Abstract: Techniques are described herein for encrypting data using a multi-layered encryption process. A service may encrypt data with first and second data keys and store the encrypted data. The system may encrypt the first data key with a first user key and the second data key with a second user key and store the data keys and the user keys in separate locations. The service may associate the user keys with a client device. In one aspect, the user keys may each include and be stored as a set of system keys and a set of ordered pairs of numeric values, with each ordered pair containing a start value and a read length value associated with one of the set of system keys. The service may assemble each user key by combining data from each of the system keys according to the associated ordered pair.

Abstract: Techniques are described herein for authenticating a client device using a unique graphic identifier. A user device may generate a unique graphic identifier that includes at least one graphic object and at least one text graphic. The user device may convert the image data associated with the at least one graphic object and at least one text graphic to numeric values and combine the numeric values to form the unique graphic identifier. The client device may use the unquiet graphic identifier for verification/registration with another device or service. In one aspect, the unique graphic identifier may be combined with other identification information associated with the client device, such as an IP address, a hostname, and/or a browser string/operating system identifier to enable a more configurable and more secure verification process. Access rules may be defined for verification of only a subset of the identification information and the unique graphic identifier.