Patent ID: 9219753
Filing Date: 2015-12-22
Classification: G06F,H04L

Abstract:
1. A non-transitory computer-readable medium including instructions that, when executed by a computing system, provide security services with respect to a remote cloud-based service, by performing a method comprising: in a security service provider module that is controlled by a first entity that is distinct from a second entity that controls the cloud-based service, wherein the security service provider module executes on a device that is distinct from a computing system that hosts the cloud-based service: receiving a first request to perform a security-related function including an encryption operation, the first request caused by the cloud-based service and received from a device of a user of the cloud-based service, the first request based on a policy that is stored by the cloud-based service and that causes the cloud-based service to utilize the security service provider module to perform the security-related function, wherein the policy causes the cloud-based service provider to redirect to the security services provider module a user access to uploaded data stored by the cloud-based service, by transmitting a redirection instruction to the device of the user, such that the user accesses the data from the security services provider module in unencrypted form without the cloud-based service ever accessing the data in unencrypted form, the redirection instruction including an identifier of the uploaded data stored by the cloud-based service and an identifier of an associated key; and performing the security-related function on behalf of the cloud-based service by: wherein the method further comprises: