Patent ID: 8566578

Claim:
A computing system implemented process for ensuring compliance in public clouds using fine-grained encryption based on data ownership comprising: a private network having at least two parties generating data wherein the at least two parties are generating their particular generated data on behalf of a first entity; receiving, at a gateway computing system, first and second generated data from respective ones of the two or more parties at a gateway computing system, the gateway computing system being coupled between the private network and a public network, the public network being accessible by the private network only through the gateway computing system; analyzing, using one or more processors, the first and second generated data and determining whether either or both of the first and second generated data is within the scope of one or more regulatory policies, the analysis resulting in a first determination that the first generated data is within the scope of one or more regulatory policies, and a second determination that the second generated data is not within the scope of one of more regulatory policies; transferring the second generated data to the public cloud without further processing; and using one or more processors to: determine, at the gateway computing system before the first generated data is transferred to the public network, using a data ownership determination system, the ownership of the first generated data to be a first entity; access ownership based encryption key data associated with the determined owner of the first generated data; obtain, at the gateway computing system before the first generated data is transferred to the public network, data representing the encryption keys associated with the determined owner of the first generated data at the gateway computing system; encrypt, at the gateway computing system before the first data is transferred to the public network, the generated data in accordance with the encryption keys associated with the determined owner of the first data, thereby transforming the data into ownership based fine-grained encrypted data; and transfer the ownership based fine-grained encrypted data from the gateway computing system to the public cloud.