Systems and methods for multi-region encryption/decryption redundancy

A non-transitory computer readable storage medium, having instructions stored thereon, which when executed by a server computer system, cause the server computer system to perform operations, comprising:

• sending, by the server computer system, sensitive information to a first cryptographic processing system of a first cloud computing system to generate first encrypted sensitive information by performing encryption of the sensitive information with a first encryption key generated by and stored by the first cryptographic processing system;
• storing, by the server computer system, the first encrypted sensitive information received from the first cryptographic processing system in a first database;
• sending, by the server computer system, the sensitive information to a second cryptographic processing system of a second cloud computing system, different from the first cloud computing system, to generate second encrypted sensitive information by performing encryption of the sensitive information with a second encryption key generated by and stored by the second cryptographic processing system;
• storing, by the server computer system, the second encrypted sensitive information received from the second cryptographic processing system in a second database;
• in response to receiving encrypted transaction data from a user device, sending, by the server computer system, the first encrypted sensitive information to the first cryptographic processing system;
• receiving, by the server computer system from the first cryptographic processing system, a decrypted version of the first sensitive information;
• and storing, in a volatile memory of the server computer system, the decrypted version of the first sensitive information, wherein the server computer system decrypting the encrypted transaction data using the decrypted version of the first sensitive information.

A server computer system, comprising:

• a non-volatile memory and a volatile memory;
• and a processor coupled with the volatile memory configured to:
• send sensitive information to a first cryptographic processing system of a first cloud computing system to generate first encrypted sensitive information by performing encryption of the sensitive information with a first encryption key generated by and stored by the first cryptographic processing system;
• store, in the non-volatile memory, the first encrypted sensitive information received from the first cryptographic processing system in a first database;
• send the sensitive information to a second cryptographic processing system of a second cloud computing system, different from the first cloud computing system to generate second encrypted sensitive information by performing encryption of the sensitive information with a second encryption key generated by and stored by the second cryptographic processing system;
• store, in the non-volatile memory, the second encrypted sensitive information received from the second cryptographic processing system in a second database;
• in response to receipt of encrypted transaction data from a user device, send, by the server computer system, the first encrypted sensitive information to the first cryptographic processing system;
• receive, from the first cryptographic processing system, a decrypted version of the first sensitive information;
• and
• store, in the volatile memory of the server computer system, the decrypted version of the first sensitive information, the server computer system decrypting the encrypted transaction data using the decrypted version of the first sensitive information.