Selective encryption configuration

A method of selective encryption, the method comprising:

• receiving, at an edge encryption proxy in a first network, an unencrypted data stream, from a client device in the first network, and wherein the unencrypted data stream indicates a recipient, wherein the recipient is an external device in a different network;
• generating a partially encrypted data stream by selectively encrypting the unencrypted data stream based on communication encryption rules and data encryption configuration information, wherein a sensitive portion of the unencrypted data stream is omitted from the partially encrypted data stream, and wherein an encrypted portion generated by encrypting the sensitive portion is included in the partially encrypted data stream;
• transmitting the partially encrypted data stream to the recipient such that recipient is prevented from decrypting the encrypted portion and the encrypted portion is stored as encrypted data;
• receiving a second partially encrypted data stream from the external device, wherein the second partially encrypted data stream indicates an internal recipient in the first network and includes an encrypted input portion and unencrypted input portions;
• generating a decrypted portion by decrypting the encrypted input portion;
• generating a decrypted data stream including the decrypted portion and the unencrypted input portions;
• and
• transmitting the decrypted data stream to the internal recipient in the first network.

A tangible, non-transitory, and computer-readable storage medium, having stored thereon instructions that, when executed by a processor, facilitate performance of operations, comprising:

• receiving, at an edge encryption proxy in a first network, an unencrypted data stream, from a client device in the first network, and wherein the unencrypted data stream indicates a recipient, wherein the recipient is an external device in a different network;
• generating a partially encrypted data stream by selectively encrypting the unencrypted data stream based on communication encryption rules and data encryption configuration information, wherein a sensitive portion of the unencrypted data stream is omitted from the partially encrypted data stream, and wherein an encrypted portion generated by encrypting the sensitive portion is included in the partially encrypted data stream;
• transmitting the partially encrypted data stream to the recipient such that recipient is prevented from decrypting the encrypted portion and the encrypted portion is stored as encrypted data;
• receiving a second partially encrypted data stream from the external device, wherein the second partially encrypted data stream indicates an internal recipient in the first network and includes an encrypted input portion and unencrypted input portions;
• generating a decrypted portion by decrypting the encrypted portion;
• generating a decrypted data stream including the decrypted portion and the unencrypted input portions;
• and
• transmitting the decrypted data stream to the internal recipient in the first network.