David Reyes Nunez

US Patent:

20180254892, Sep 6, 2018

Filed:

May 8, 2018

Appl. No.:

15/974161

Inventors:

- San Francisco CA, US
MacLane Scott Wilkison - Mountain View CA, US
David Nunez - San Francisco CA, US
Isaac Agudo - San Francisco CA, US

International Classification:

H04L 9/08
H04L 9/14
H04L 9/30

Abstract:

Provided is a computer system and method that enables delegated access to encrypted information for distributed messaging and queuing frameworks, or in general, to publish/subscribe architectures. In said frameworks and architectures, data is published by data producers and organized in channels or queues, which consumer applications can subscribe to, and that are managed by one or multiple broker entities.

US Patent:

20180254901, Sep 6, 2018

Filed:

May 8, 2018

Appl. No.:

15/974196

Inventors:

- San Francisco CA, US
MacLane Scott Wilkison - Mountain View CA, US
David Nunez - San Francisco CA, US
Isaac Agudo - San Francisco CA, US

International Classification:

H04L 9/08
H04L 9/14
H04L 9/30
G06F 21/60

Abstract:

Provided is a process including: encrypting each of a plurality of data encryption keys with a first public cryptographic key to form encrypted data encryption keys; obtaining a second public cryptographic key; generating a transformation key based on the first public-private cryptographic key pair and the second public cryptographic key; and transforming the encrypted data encryption keys with proxy re-encryption based on the transformation key; and obtaining the second private cryptographic key and the transformed encrypted data encryption keys.

US Patent:

20170323114, Nov 9, 2017

Filed:

May 6, 2017

Appl. No.:

15/588614

Inventors:

- Santa Clara CA, US
MacLane Scott Wilkison - Mountain View CA, US
David Nunez - Santa Clara CA, US
Isaac Agudo - Santa Clara CA, US

International Classification:

G06F 21/62
H04L 9/16
H04L 9/06
H04L 9/08
H04L 29/06
H04L 9/32

Abstract:

Provided is a process of securing data in a distributed storage and processing application, the process including: obtaining a cluster of computing nodes, wherein: the cluster stores a plurality of ciphertexts; accessing a transformation key with a first computing node; transforming the ciphertext with the first computing node based on the transformation key into a transformed ciphertext configured to be decrypted with a temporary access key; decrypting the transformed ciphertext with the second computing node based on the temporary access key to obtain plaintext data.