SYSTEMS AND METHODS FOR PROVIDING DATA SECURITY SERVICES

摘要

Embodiments described herein provide enhanced computer- and network-based systems and methods for providing data security with respect to computing services, such as a digital transaction service (DTS). Example embodiments further provide a discovery service that enables nodes that are included in, or otherwise communicatively coupled to, the DTS to actively or passively “discover” roles and keys associated with the nodes. These node roles are associated with the various services provided by the DTS. A security module provides at least a portion of the security services.

主权项

1. A system configured to provide an online service and protect data that is accessed by the system, the system comprising:
a computing cluster, wherein the computing cluster includes at least a first node and at least partially provides the online service to client devices via a public network; and a data security service that is distinct from the computing cluster, the data security service is communicatively coupled to the first node of the computing cluster via a private network, wherein the data security service is configured to protect data that is accessed by the system by:
receiving a first message, wherein the first message includes encrypted payload data originating from a second node;decrypting the payload data based on a first key; andtransmitting a second message to the first node via the private network, wherein the second message includes the decrypted payload data.