TECHNOLOGY TO PROVIDE SECURE KEY PROTECTION AND FLEXIBLE FILE SHARING IN ENCRYPTED FILE SYSTEM

摘要

Systems, apparatuses and methods may provide for technology that conducts, based on signed class information from a user, a membership verification of the user with respect to a file class. Additionally, if the membership verification is successful, a key encryption key may be generated based on the signed class information and a root key embedded in a trusted environment. A file encryption key may also be generated based on the key encryption key and context information associated with a digital file in the file class.