SEPARATE CRYPTOGRAPHIC KEYS FOR PROTECTING DIFFERENT OPERATIONS ON DATA

摘要

The disclosed embodiments provide a system that processes data. During operation, the system uses a first key to protect a write operation on the data. Next, the system uses a second key to protect a read operation on the data.

主权项

1. A computer-implemented method for processing data, comprising:
using a first key to protect a write operation on the data by encrypting, by computer, the data with a data key and generating a signature associated with the data with the first key; using a second key to protect a read operation on the data by decrypting the data with the data key and verifying the signature associated with the data with the second key; using a third key to protect a write operation on metadata for the data by encrypting the metadata with a metadata key and generating a signature associated with the metadata with the third key; and using a fourth key to protect a read operation on the metadata by decrypting the metadata with the metadata key and verifying the signature associated with the metadata with the fourth key.