Patent ID: 9716696
Date: 2017-07-25
CPC Classifications: H04L

Claim:
1. A method of performing cloud-based encryption of data on behalf of an enterprise operating an enterprise data network using an enterprise managed encryption key, comprising: receiving, at a proxy server deployed outside of the enterprise data network, a key material generated by a key agent deployed inside the enterprise data network, the key material being generated using the enterprise managed encryption key being available only within the enterprise data network; storing the key material on the proxy server in a temporary memory for a first time period associated with a valid time period for the key material; generating, at the proxy server, a data encryption key using the key material, the data encryption key being used to perform cloud-based encryption of data on behalf of the enterprise; in response to the expiration of the first time period, repeating the receiving of a key material from the proxy server to generating a data encryption key based on the received key material; providing a cloud based encryption service on the proxy server to encrypt and decrypt data on behalf of the enterprise using the key material; receiving, at the proxy server, a first data in clear text from the enterprise data network; transmitting the first data in clear text to a cloud service provider; receiving, at the proxy server, a request from the cloud service provider to encrypt the first data, the request including the first data in clear text transmitted from the cloud service provider; in response to the request from the cloud service provider, encrypting, at the proxy server, the first data received from the cloud service provider using the data encryption key; and transmitting the encrypted first data to the cloud service provider to be stored on the cloud service provider as encrypted data at rest.