DATA ENCRYPTION AT THE CLIENT AND SERVER LEVEL

摘要

Embodiments of the present invention include a computer system and computer program product for implementing encryption of data. A computer system determines that a first data field of a plurality of data fields of a web form requires encryption. The computer system tags the first data field with one or more HTML encryption tags. The computer system displays the web form to a user. The computer system receives user input, wherein at least a portion of the user input is contained in the first data field of the web form. The computer system encrypts the first data field on a first computer, wherein a first user specific encryption key is associated with at least the first data field. The computer system inserts the encrypted first data field into at least one record stored on a second computer.

主权项

1. A computer program product for encrypting data, the computer program product comprising:
one or more computer-readable storage devices, and program instructions stored on the one or more computer-readable storage devices, the program instructions comprising: program instructions, for execution on a server computer system, to determine that a first data field of a plurality of data fields of a web form requires encryption, and in response, add a tag to the first data field in an HTML document representing the form to indicate that encryption is required for the first data field; program instructions, for execution on the server computer system, responsive to a request by a client computer for the form, to send the HTML document with the encryption tag to the client computer for display to a user; program instructions, for execution on the client computer, to receive from the user, data input to the first data field of the form while the form is displayed on the client computer, and in response to the data input and the encryption tag, to encrypt the first data field using a first encryption key; program instructions, for execution on the client computer, responsive to a request from the user, to send the form with the encrypted first data field to the server computer system without sending the first encryption key or a corresponding first decryption key to the server computer system, the client computer deleting the form from the client computer in response to sending the form with the encrypted first data field to the server computer system, but retaining the first encryption key or the corresponding first decryption key; and program instructions, for execution on the server computer system, to store the encrypted first data field, and to delete the form with the encrypted first field in response to storing the encrypted first data field.