Abstract: The present application discloses a method, system, and computer system for managing data using keys. The method includes receiving a request to access data, wherein the data is encrypted based on a tenant service encryption key (TSEK) corresponding to the tenant database, determining a wrapper key used in connection with encrypting the TSEK based on a TSEK metadata, determining a top-level key used in connection with encrypting the wrapper key based on wrapper key metadata stored in association with the encrypted version of the wrapper key, obtaining the data stored within the tenant database, comprising decrypting at least part of the data based on (i) the TSEK, (ii) the wrapper key, and (iii) the top-level key, and providing the data in response to the request. The TSEK metadata is stored in the tenant database. An encrypted version of the wrapper key is stored in a key management service.

Abstract: The present application discloses a method, system, and computer system for managing data using keys. The method includes receiving a request to access data stored within a tenant database associated with a tenant, wherein the data is encrypted based at least in part on a tenant service encryption key (TSEK) corresponding to the tenant database, determining a wrapper key used in connection with encrypting the TSEK based at least in part on a TSEK metadata stored in association with the TSEK, determining a top-level key used in connection with encrypting the wrapper key based at least in part on wrapper key metadata stored in association with the encrypted version of the wrapper key, obtaining the data stored within the tenant database, comprising decrypting at least part of the data based at least in part on (i) the TSEK, (ii) the wrapper key, and (iii) the top-level key, and providing the data in response to the request. The TSEK metadata is stored in the tenant database.

Abstract: The present application discloses a method, system, and computer system for managing data using keys. The method includes receiving a request to access data stored within a tenant database associated with a tenant, wherein the data is encrypted based at least in part on a tenant service encryption key (TSEK) corresponding to the tenant database, determining a wrapper key used in connection with encrypting the TSEK based at least in part on a TSEK metadata stored in association with the TSEK, determining a top-level key used in connection with encrypting the wrapper key based at least in part on wrapper key metadata stored in association with the encrypted version of the wrapper key, obtaining the data stored within the tenant database, comprising decrypting at least part of the data based at least in part on (i) the TSEK, (ii) the wrapper key, and (iii) the top-level key, and providing the data in response to the request. The TSEK metadata is stored in the tenant database.

Abstract: A system and a method for performing purchase transactions over a network are provided. The system includes a server controlled by a service provider, including a link to a network; a processor circuit, the processor circuit configured to receive purchase requests from a mobile phone, and to transfer funds from a user account to a vendor account; and a memory circuit storing a plurality of mobile phone numbers and a plurality of personal identification numbers (PINs), wherein each mobile phone number and PIN is associated with a user account. A non-transitory machine-readable medium may include a plurality of machine-readable instructions which when executed by one or more processors of a server controlled by a service provider are adapted to cause the server to perform a method as above.

Abstract: A system and a method for performing purchase transactions over a network are provided. The system includes a server controlled by a service provider, including a link to a network; a processor circuit, the processor circuit configured to receive purchase requests from a mobile phone, and to transfer funds from a user account to a vendor account; and a memory circuit storing a plurality of mobile phone numbers and a plurality of personal identification numbers (PINs), wherein each mobile phone number and PIN is associated with a user account. A non-transitory machine-readable medium may include a plurality of machine-readable instructions which when executed by one or more processors of a server controlled by a service provider are adapted to cause the server to perform a method as above.

Abstract: A system and a method for performing purchase transactions over a network are provided. The system includes a server controlled by a service provider, including a link to a network; a processor circuit, the processor circuit configured to receive purchase requests from a mobile phone, and to transfer funds from a user account to a vendor account; and a memory circuit storing a plurality of mobile phone numbers and a plurality of personal identification numbers (PINs), wherein each mobile phone number and PIN is associated with a user account. A non-transitory machine-readable medium may include a plurality of machine-readable instructions which when executed by one or more processors of a server controlled by a service provider are adapted to cause the server to perform a method as above.

Abstract: A system and a method for performing purchase transactions over a network are provided. The system includes a server controlled by a service provider, including a link to a network; a processor circuit, the processor circuit configured to receive purchase requests from a mobile phone, and to transfer funds from a user account to a vendor account; and a memory circuit storing a plurality of mobile phone numbers and a plurality of personal identification numbers (PINs), wherein each mobile phone number and PIN is associated with a user account. A non-transitory machine-readable medium may include a plurality of machine-readable instructions which when executed by one or more processors of a server controlled by a service provider are adapted to cause the server to perform a method as above.