Method and system for initialzing a key management system
A network system for key management including a server, a key management system providing process logic for key management system initialization located on the server, a key management system storage providing a secure data storage for the key management system, and an interface providing a means for inputting data into the key management system.
Latest Schlumberger Omnes, Inc. Patents:
This application is a continuation of U.S. patent application No. 10/037,153, filed Dec. 21, 2001.
BACKGROUND OF INVENTIONConnection of company networks to the Internet has resulted in a requirement for increased network security. This has resulted in some software systems, i.e. Financial Software Systems, requiring security information as part of their operation. Security information includes such information as encryption/decryption keys for encrypted databases, administrator passwords to access external resources such as a directory server, etc. Security information is typically stored in a configuration file that is accessible by the software systems.
While security information is used to ensure the security of particular software systems and the data they use, security information itself is typically not secure. Security information typically stored in a configuration file is in “clear text” i.e. text in ASCII format. However, some software systems include devices to safeguard security information, such as, storing security information in encrypted form. While this will protect the security information when it is not being used, it does not protect the security information when it is accessed. When security information is accessed by a particular software system, the security information must first be decrypted prior to being used. During this time the security information is in clear text and thus is exposed.
To protect security information, software system operators typically use Hardware Security Modules (HSM). HSM physically protect security information by providing tamper-resistant security information storage. Additionally, HSM perform functions such as security information generation, security information backup, security information management, etc. Security information inside an HSM is typically accessed by a proprietary software interface.
Typically, the network system has a security server (10) that contains root security information. The root security information allows a user with that information to access any resource on the network. Security information used by the security server is stored on an HSM (12). Additionally, the security server (10) runs the HSM interface that allows the security server to control all HMS (12) on the network. The network system as also typically has an application server (14) and a directory server (16). The application server (14) typically runs the business logic for a server-based application. The directory server typically runs a directory service. The directory service enables a user to locate hosts and services on a network. The application server (14) and the directory server (16) also both store security information in HSM (12). Finally, the network system contains a web server (18). The web server (18) typically runs server software that uses HyperText Transfer Protocol to serve up HyperText Mark-up Language documents and any associated files and scripts when requested by a client, such as a Web browser (20). The web server (18) stores security information in a HSM (11).
When a web browser (20) is running a web application via a web server (18) and an application server (14), there may be a request to access sensitive data such as a financial data located on the application server (14). The application server (14) on behalf of the web browser (20) will request some security information from the HSM (12). The security information on the HSM (12) is then accessed via the HSM Interface (11).
SUMMARY OF INVENTIONIn general, in one aspect, the invention relates to a network system for key management, comprising: a server, a key management system providing process logic for key management system initialization located on the server, a key management system storage providing a secure data storage for the key management system, and an interface providing a means for inputting data into the key management system.
In general, in one aspect, the invention relates to a network system for key management, comprising: a server, a key management system providing process logic for key management system initialization located on the server, a key management system storage providing a secure data storage for the key management system, an interface providing a means for inputting data into the key management system, and a client computer operatively connected to the server, wherein the client computer comprises a user interface to input data into the key management system.
In general, in one aspect, the invention relates to a method for initializing a key management system comprising: entering data into a key management system interface, entering a key encryption key into the key management system interface, combining data into a tuple, encrypting the tuple with the key encryption key to produce a secret token, storing the secret token in a vector, hashing the key encryption key, storing a hashed key encryption key in the vector, storing a list of keys in the vector, serializing the vector to produce a serialized file, and storing the serialized file in a key management system storage.
In general, in one aspect, the invention relates to a method for initializing a key management system comprising: entering data into a key management system interface, entering a key encryption key into the key management system interface, combining data into a tuple, encrypting the tuple with the key encryption key to produce a secret token, storing the secret token in a vector, hashing the key encryption key, storing a hashed key encryption key in the vector, storing a list of keys in the vector, serializing the vector to produce a serialized file, storing the serialized file in a key management system storage, encoding a key field of the tuple, randomizing the order of the list of keys, randomizing the order of the secret tokens in the vector, and generating data to encrypt.
In general, in one aspect, the invention relates to an apparatus for initializing a key management system comprising: means for entering data into a key management system interface, means for entering a key encryption key into the key management system interface, means for combining data into a tuple, means for encrypting the tuple with the key encryption key to produce a secret token, means for storing the secret token in a vector, means for hashing the key encryption key, means for storing a hashed key encryption key in the vector, means for storing a list of keys in the vector, means for serializing the vector to produce a serialized file, means for storing the serialized file in a key management system storage, means for encoding a key field of the tuple, means for randomizing the order of the list of keys, means for randomizing the order of the secret tokens in the vector, and means for generating data to encrypt.
Other aspects and advantages of the invention will be apparent from the following description and the appended claims.
BRIEF DESCRIPTION OF DRAWINGS
In the following detailed description of the invention, numerous specific details are set forth in order to provide a more thorough understanding of the invention. However, it will be apparent to one of ordinary skill in the art that the invention may be practiced without these specific details. In other instances, well-known features have not been described in detail to avoid obscuring the invention.
The present invention relates to initializing a key management system. Further, the present invention relates to a method for securing keys within the key management system. Further, the present invention relates to a method for storing keys within the key management system.
In one or more embodiments of the present invention, the KMS storage (26) is located on a different computer than the KMS (24). Further, the computers are connected via a secure connection such as a connection using 128-bit encryption running over a Secure Socket Layer (SSL).
While the present invention is described in according to one embodiment those skilled in the art will appreciate that the KMS (24) and KMS storage (26) may be distributed across the network system.
The encryption module (42) contains encryption tools. The encryption tools include tools for key generation and tools for encryption. The key generation tools typically use a randomly generated seed as part of the input to the key generation tool. Specifically, within the KMS (24), the encryption module (42) includes process logic that generates the random seed for input to the key generation tool. The generated keys are used to access secure systems and/or applications such as a directory server. The encryption tool obtains data to be encrypted from the memory (36), or KMS generated keys from the key generation tools within the encryption module (42), and encrypts them using a specified encryption function. The encryption module (42) uses a KEK as the encryption key. In one embodiment of the present invention, the KEK includes three distinct parts: a KEK Pin, a KEK Salt, and a KEK Iteration. Constraints may be placed on all three parts of the KEK. For example, the KEK Pin may have a requirement to be at least 10 characters with a minimum of 3 numbers (N) and 3 letters (L) e.g., KEK Pin: NNNLNLLNLN. Depending on the encryption algorithm used, the KEK may have greater or fewer than three parts. Additionally, some encryption algorithms may also apply constraints to individual KEK parts. For example, in one embodiment of the present invention uses PBE with MD5 in combination with Triple Data Encryption Standard (DES) as the encryption algorithm. This imposes a constraint on the KEK salt by limiting the KEK salt to eight characters. Further, the KEK Iteration is limited to an integer. Those skilled in the art will appreciate that different encryption algorithms or combination of encryption algorithms may be used in conjunction with the present invention.
In one embodiment of the present invention, the encryption module uses a symmetric algorithm e.g., Triple Data Encryption Standard (DES). Symmetric algorithms rely on encryption and decrypting data using the same encryption key. Thus, a KEK is used to encrypt and decrypt data within the KMS.
In another embodiment of the present invention, the encryption module uses an asymmetric algorithm such as Rivest-Shamir-Adleman (RSA) algorithm. RSA creates a pair of related keys, one key to encrypt data and another key to decrypt data. Thus, a KEK may be used to encrypt the data and a corresponding Key Decryption Key (KDK) may be used to decrypt the data. The KEK and KDK are created simultaneously using the same algorithm e.g., RSA algorithm. The key generation tools within the encryption module generate the KEK and KDK using random input either generated by the user or by the key generation tool.
The encoding module (40) converts the data into a binary representation that is 64 bit encoded. Typically, encoding is performed to hide the clear text names of the data being encrypted. The serialization module (46) obtains input from the hashing module (38), the encoding module (40) and encryption module (42) and stores it in a vector. Once all the data has been received, the serialization module (46) processes the vector to create a serialized file. Serialization is the process of saving an object's state to a sequence of bytes, such that it may be rebuilt into a live object at some future time. Specifically, within the KMS the vector is converted into an object within the serialization module (46) and subsequently converted into a serialized file. The serialized file allows the data within the vector to persist beyond the time the KMS (24) is active. Additionally, the serialized file may be copied and transferred to another system where it may be stored as a backup. The process of creating the serialized filed is typically carried out using a Java™ Serialization Application Program Interface (API).
The KMS (24) uses three main data structures: an n-tuple, a data structure (e.g., a vector), and a serialized file.
A serialized file is a flat-file. A flat-file is a file that consists of a single record type in which there is not embedded structure information that governs relationships between the records. Specifically, with serialized flat-files they are “flattened” by the Sun® Mircosystem's Java™ Serialization Application Program Interface (API) such that they may be rebuilt at some future time. The serialization module takes a vector as input and produces a serialized file as output.
Once the user enters data into the above mentioned sections the user then proceeds to enter in a Key Encryption Key (KEK) section (74) on the GUI (62). The KEK section (74) on the GUI contains text-input fields for each portion of the KEK that is required. For example, referring to
Once all the data has been entered user may check the “Write KEK to file for automatic KMS Initialization” checkbox (82). By checking the “Write KEK to file for automatic KMS Initialization” checkbox, the KEK section (74) information will be saved in a file that is accessed when the KMS is used. If this box is not checked, then every time the KMS is started the user will have to enter the KEK section (74) information. After the user has made a decision to check the “Write KEK to file for automatic KMS Initialization” checkbox (82), the user may click a “Create File” Button (84) to input the data into the KMS for it to be processed.
Referring again to
In one embodiment of the present invention, the KEK is stored on a smart card and input into the KMS via a GUI that has an interface with a smart card reader.
In one embodiment of the present invention, the 3-tuple is converted to a 4-tuple allowing the KMS to scale to use with multiple application simultaneously. For example, consider the above scenario with the security application. If another application such as an accounting application is added to the application server, then a another set of data will be required e.g., administrator name, administrator password, etc. to access the accounting application and the accounting application data.
In addition to modification made to the 3-tuple, the content in the vector is also modified.
Advantages of the present may include one or more of the following. In some embodiments, the present invention provides a software solution to key management system. Further, the present invention may be integrated into existing network infrastructure without requiring additional hardware. In some embodiments, the present invention is scalable to manage keys for multiple applications. In some embodiments, the present invention allows sensitive data to be readily backed-up and recovered. In some embodiments of the present invention, the keys are never stored as clear text. Further, the present invention allows the KMS to be distributed over multiple servers within a network system. Further, the present invention allows the KEK to contain multiple portions e.g., salt, count, integer, such that KEK may be distributed to multiple security officers. Those skilled in the art can appreciate that the present invention may include other advantages and features.
While the invention has been described with respect to a limited number of embodiments, those skilled in the art, having benefit of this disclosure, will appreciate that other embodiments can be devised which do not depart from the scope of the invention as disclosed herein. Accordingly, the scope of the invention should be limited only by the attached claims.
Claims
1-35. (canceled)
36. A method for securing data in a key management system (KMS), comprising:
- receiving the data in the KMS, wherein the data comprises a key name, a key value, and a key type;
- receiving a key encryption key (KEK) in the KMS;
- encrypting the data using the KEK to generate a secret token;
- hashing the KEK to generate a hashed KEK;
- generating a data structure comprising the secret token and the hashed KEK; and
- storing the data structure in a KMS storage.
37. The method of claim 36, further comprising:
- storing the data in a data structure prior to encrypting the data.
38. The method of claim 37, further comprising:
- encoding the key name to obtain an encoded key name after storing the key name in the data structure.
39. The method of claim 38, wherein the data structure comprises an encoded key list and wherein the encoded key list comprises the encoded key name.
40. The method of claim 36, further comprising:
- associating the secret token with an application.
41. The method of claim 40, wherein the data structure comprises an application name tag corresponding to the application.
42. The method of claim 36, wherein storing the data structure comprises:
- serializing the data structure to generate a serialized file; and
- storing the serialized file in the KMS storage.
43. The method of claim 36, wherein encrypting the data comprises using one selected from a group consisting of a symmetric algorithm and an asymmetric algorithm.
44. The method of claim 36, wherein the data is received from a client over a network.
45. The method of claim 36, wherein the KEK is received from a client using a security device interfacing over the network with the KMS and wherein the security device stores the KEK.
46. The method of claim 36, wherein the data is encrypted by the KMS.
47. A system for securing data, comprising:
- a key management system (KMS) configured to receive data and a key encryption key (KEK), comprising: an encryption module configured to encrypt the data using the KEK to generate a secret token; a hashing module configured to hash the KEK to generate a hashed KEK; a serialization module configured to generate a data structure comprising the secret token and the hashed KEK; and
- a KMS storage configured to store the data structure,
- wherein the data comprises a key name, a key value, and a key type.
48. The system of claim 47, further comprising:
- a graphical user interface configured to receive the data.
49. The system of claim 48, wherein the graphical user interface is integrated into a web browser.
50. The system of claim 47, wherein the data is received from a client over a network.
51. The system of claim 47, wherein the KEK is received from a client using a security device interfacing over the network with the KMS, and wherein the security device stores the KEK.
52. The system of claim 47, wherein the data structure is stored in the KMS storage as a serialized file.
53. The system of claim 47, wherein the KMS is further configured to store the data in a data structure prior to encrypting the data.
54. The system of claim 53, wherein the encoding module is further configured to encode the key name to obtain an encoded key name after the key name is stored in the data structure.
55. The system of claim 54, wherein the data structure comprises an encoded key list comprising the encoded key name.
56. The system of claim 47, wherein the KMS is further configured to:
- tag the secret token to associate the secret token with an application, wherein the data structure further comprises the tag.
57. A computer readable medium storing instructions for execution on a processor, wherein the instructions comprise functionality to:
- receive the data in the KMS, wherein the data comprises a key name, a key value, and a key type;
- receive a key encryption key (KEK) in the KMS;
- encrypt the data using the KEK to generate a secret token;
- hash the KEK to generate a hashed KEK;
- generate a data structure comprising the secret token and the hashed KEK; and
- store the data structure in a KMS storage.
Type: Application
Filed: Mar 26, 2007
Publication Date: Aug 16, 2007
Applicant: Schlumberger Omnes, Inc. (Houston, TX)
Inventors: Chui-Shan Lam (Houston, TX), Jameel ur Syed (Houston, TX)
Application Number: 11/728,619
International Classification: H04L 9/00 (20060101);