Secure escrow service

Patent metadata

Field	Value
Publication number	US-9106411-B2
Application number	US-201313767847-A
Country	US
Kind code	B2
Filing date	Feb 14, 2013
Priority date	Sep 30, 2012
Publication date	Aug 11, 2015
Grant date	Aug 11, 2015

Abstract

A method of restoring confidential information items of a first device to a second device by using a set of servers. The method generates a public and private key pair and ties the private key to the hash of executable code of the servers at the time of generating the public and private keys. The method receives the encrypted confidential information items in a secure object which is encrypted with a user-specific key and the public key. The method only provides the confidential information to the second device when the second device provides the same user-specific key as the key that encrypts the secure object and the hash of the executable code of the servers at the time of accessing the private key to decrypt the secure object matches the hash of the executable code running on the servers at the time of generating the private key.

First claim

What is claimed is:

1. A method of accessing a recovery key to decrypt confidential data of a device, the method comprising:
storing a private key and an associated access control list on a set of servers, the access control list storing a hash value of executable code running on the set of servers at a time of generating the private key;
receiving a request at the set of servers to access the recovery key, the request comprising a secure object comprising the recovery key, the…

Assignees

• Apple Inc

Inventors

• De Atley Dallas B
• Hauck Jerrold V
• Adler Mitchell D

Classifications

• H04L63/062

  Electricity · mapped topic

• H04L63/0428 Primary

  Electricity · mapped topic

• G06F21/00

  Physics · mapped topic

• H04L9/0861 Primary

  Electricity · mapped topic

• G06F21/64

  Physics · mapped topic