DATA ENCRYPTION, TRANSPORT, AND STORAGE SERVICE FOR CARRIER-GRADE NETWORKS

摘要

A method, a system, and a non-transitory storage medium for storing user preferences pertaining to a data encryption service that provides on-demand encryption for data in-flight and at rest; receiving data from a user device; determining whether to invoke the data encryption service based on the data and the user preferences; generating a key to encrypt the data based on determining that the data encryption service is to be invoked; generating a first message that includes the data, the key, and data indicating where encrypted data is to be stored; establishing a secure connection with a device; and transmitting the first message to the device via the secure connection.

主权项

1. A method comprising:
storing, by a first network device, user preferences pertaining to a data encryption service that provides encryption for data in-flight and at rest; receiving, by the first network device, data from a user device; determining, by the first network device, whether to invoke the data encryption service based on the data and the user preferences; generating, by the first network device, a key to encrypt the data based on determining that the data encryption service is to be invoked; generating, by the first network device, a first message that includes the data, the key, and data indicating where encrypted data is to be stored; establishing, by the first network device, a secure connection with a second network device; and transmitting, by the first network device, the first message to the second network device via the secure connection for subsequent encryption.