INTEGRATION OF THIRD-PARTY ENCRYPTION KEY MANAGERS WITH CLOUD SERVICES

摘要

A method (400, 500) for integrating third-party encryption managers with cloud services includes receiving, at data processing hardware (114), an operation request (162) requesting a cryptographic operation on data (190) comprising an encryption, operation or a decryption operation. When the operation is an encryption operation, the method includes transmitting a data encryption key (152) associated with the data to a remote entity (170). The remote entity encrypts the data encryption key with a key encryption key (154) and transmits the encrypted data encryption key (152E) to the data processing hardware. When the operation is a decryption operation, the method includes transmitting the encrypted data encryption key to the remote entity which causes the remote entity to decrypt the encrypted data encryption key with the key encryption key and transmit the decrypted data encryption key (152E) to the data processing hardware.