Patent ID: 9577988
Date: 2017-02-21
CPC Classifications: H04L

Claim:
1. A method comprising: storing, by a first network device, user preferences pertaining to a data encryption service that provides encryption for data in-flight and at rest, wherein the user preferences indicate a location where encrypted data is to be stored and a type of data to be encrypted, and wherein the user preferences are set by a user that subscribes to the data encryption service; receiving, by the first network device, a first data from the user via a user device; determining, by the first network device, whether to invoke the data encryption service based on receiving the first data and use of the user preferences; generating, by the first network device, a key to encrypt the first data based on determining that the data encryption service is to be invoked; generating, by the first network device, a first message that includes the first data, the key, and data indicating the location; establishing, by the first network device, a secure connection with a second network device in response to the generating of the first message; transmitting, by the first network device, the first message to the second network device via the secure connection in response to the establishing; transmitting, by the first network device, the first data to a destination included in the first data without invoking the data encryption service based on determining that the data encryption service is not to be invoked; generating, by the second network device, a second message that includes encrypted first data in response to receipt of the first message; and transmitting, by the second network device, the second message to a third network device.