SYSTEMS AND METHODS FOR CLOUD DATA SECURITY

摘要

Techniques for providing data security services with respect to cloud-based services are described. Examples include a security service provider (“SSP”) configured to perform or provide one or more security-related services or functions with respect to or on behalf of some other system or service. The other system or service may be, for example, a cloud-based system that provides network-accessible services. The SSP allows a user of the cloud-based service to provide and manage one or more security-related services, such as data storage, encryption, decryption, key management, and the like. By using and controlling the SSP, the user can be confident that his or her data is being securely represented and stored, even though it is being operated upon by a cloud-based service that is not under the user's control.

主权项

1. A method for providing security services with respect to a remote cloud-based service, comprising in a security service provider module that is controlled by a first entity that is distinct from a second entity that controls the cloud-based service,
receiving a request from the cloud-based service to perform a security-related function including at least one of a storage or encryption operation, the request based on a policy that is specified by a user of the cloud-based service and that causes the cloud-based service to utilize the security service provider module to perform the security-related function; and performing the security-related function on behalf of the cloud-based service.