The Ironhouse2 Pattern

Security doesn't get any stronger than this. An attacker is going to have to break into your systems to see data before/after encryption.
 
 This is exactly the same example but broken into two threads so you can better see what client and server do, separately.