Patent ID: 8892867

Claim:
A method of protecting data processed in a cloud computing environment, the method comprising: encrypting original data using a first key in a client computer to generate a first encrypted data; providing the first encrypted data from the client computer to a server computer over a first channel; encrypting the first encrypted data using a second key in the server computer to generate a second encrypted data; providing the second encrypted data from the server computer to the client computer; decrypting the second encrypted data in the client computer using the first key to generate a third encrypted data; providing the third encrypted data from the client computer to the server computer; and decrypting the third encrypted data in the server computer using the second key to generate the original data, wherein the first encrypted data is transmitted to the server computer together with information indicating a second channel that is different channel from the first channel over which to transmit the second encrypted data, the first key is different from the second key, and the second key is not sent by the server computer to the client computer.