ENCRYPTION/DECRYPTION IN A CLOUD STORAGE SOLUTION

摘要

The disclosure generally describes computer-implemented methods, software, and systems, including a method for decryption of data stored in the cloud. A record is received from a cloud storage solution, wherein at least one data field in the received record is encrypted, and wherein each encrypted data field is associated with an encrypted field identifier. A client certification key associated with a user accessing the record and at least one encrypted field identifier are provided to a security server. At least one decryption key associated with at least one of the at least one encrypted field identifier is received. Using each of received decryption key, at least one encrypted data field is decrypted. The received record is presented to the user accessing the record.

主权项

1. A computer-implemented method for decrypting encrypted data received from a cloud, comprising:
receiving a record from a cloud storage solution, wherein at least one data field in the received record is encrypted, and wherein each encrypted data field is associated with an encrypted field identifier; providing a client certification key associated with a user accessing the record and at least one encrypted field identifier to a security server; receiving at least one decryption key associated with at least one of the at least one encrypted field identifier; decrypting, using each of the received decryption keys, at least one encrypted data field; and presenting the received record to the user.