/Patent Tracker
GoogleGranted patentSecurity & privacyInterest 3/10

Google patents method for splitting and encrypting user data tables

Google has been granted a patent for a method that splits large user data tables into smaller chunks called tablets. Each tablet is encrypted with a unique key, which is then locked behind a master resource key to ensure only authorized servers can access the data.

Why it mattersThis improves how cloud services manage access to sensitive user data by adding an extra layer of encryption control between servers and individual data chunks.

In the filing’s own words

A method for distributing encryption keys includes receiving a table associated with a particular user, the table including a plurality of data blocks and splitting the table into a plurality of tablets including a corresponding portion of data blocks. The method also includes generating a resource key uniquely associated with the table and for each tablet generating a unique data encryption key for the corresponding tablet to encrypt with the unique data encryption key. The method also includes encrypting each data encryption key with the resource key and distributing control of each encrypted tablet and each corresponding encrypted data encryption key to a plurality of tablet servers, each controlling one or more of the encrypted tablets. The resource key transmits to a remote entity causing the remote entity to encrypt the resource key with a user key associated with the particular user and transmit the encrypted resource key.

What exactly they claim (claim 1)

1. A computer-implemented method, being implemented by data processing hardware, comprising: receiving a table associated with a particular user; generating a unique resource key uniquely associated with the table; splitting the table into a plurality of tablets, for each tablet of the plurality of tablets: generating a unique data encryption key for a tablet; encrypting the tablet with the unique data encryption key; and encrypting the unique data encryption key with the unique resource key; encrypting the unique resource key with an access control key associated with an access control list (ACL) comprising a list of tablet servers authorized to access the unique resource key; distributing, by the data processing hardware, control of each encrypted tablet and each corresponding encrypted data encryption key to a plurality of tablet servers; receiving, from a tablet server, a resource key request requesting to decrypt the unique resource key encrypted with the access control key associated with the ACL; determining that the tablet server is authorized to access the unique resource key based on the ACL; based on determining that the tablet server is authorized to access the unique resource key, decrypting the unique resource key encrypted with the access control key; and transmitting the decrypted unique resource key to the tablet server, the decrypted unique resource key, when received by the tablet server, is configured to cause the tablet server to: decrypt, using the decrypted unique resource key, the unique data encryption key corresponding to the encrypted tablet associated with the tablet server; and decrypt, using the decrypted unique data encryption key, the encrypted tablet.

Facts

Company
Google (Google LLC)
Official title
Distribute encryption keys securely and efficiently
Patent number
US12732362B2
Application number
18988851
Filed
Dec 19, 2024
Granted
Sep 8, 2026
Inventors
3
Claims
14

Classified under

H04L 9/088 Electricity & electronicsH04L 9/0861 Electricity & electronicsH04L 9/14 Electricity & electronicsH04L 63/101 Electricity & electronicsH04L 9/0822 Electricity & electronics
Read the full filing (official PDF) ↗ Open in the Patent Tracker

More from Google in Security & privacy

Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.