Secure data leakage control in a third party cloud computing environment

A secure portion processing module hosted by cloud computing environment hardware on one or more servers of a third party cloud computing environment, the secure portion processing module configured to perform data processing steps comprising:

• receiving computer executable code from a user of the third party cloud computing environment;
• providing the computer executable code in a secure portion of the third party cloud computing environment, wherein the secure portion is controlled by a secure data provider independently of the user, and wherein the secure portion is hosted by cloud computing environment hardware on one or more servers of the third party cloud computing environment;
• executing the computer executable code in the secure portion to request secure data from the secure data provider and to receive the secure data from the secure data provider;
• further executing the computer executable code in the secure portion to generate an encrypted external data request that comprises at least a portion of the secure data;
• determining, by the third party cloud computing environment, based on a data type of the portion of the secure data, whether an external data provider is authorised to receive the portion of the secure data;
• in response to determining that the external data provider is authorised to receive the portion of the secure data, sending, by the third party cloud computing environment, the encrypted external data request to the external data provider;
• receiving, in response to the encrypted external data request, external data from the external data provider at the third party cloud computing environments;
• storing, in the secure portion of the third party cloud computing environment, the received external data;
• and
• in response to determining that the external data provider is not authorised to receive the portion of the secure data, blocking the encrypted external data request from being transmitted to the external data provider,
• wherein the user is different from a party that controls the third party cloud computing environment,
• wherein the user is different from a party that controls the secure data provider, and
• wherein the external data provider is different from the party that controls the secure data provider.

A system for securely processing data in a third-party cloud computing environment, the system comprising:

• at least one computer processor configured to:
• receive computer executable code from a user of the third party cloud computing environment;
• provide the computer executable code in a secure portion of the third party cloud computing environment, wherein the secure portion is controlled by a secure data provider independently of the user, and wherein the secure portion is hosted by cloud computing environment hardware on one or more servers of the third party cloud computing environment;
• execute the computer executable code in the secure portion to request secure data from the secure data provider and to receive the secure data from the secure data provider;
• further execute the computer executable code in the secure portion to generate an encrypted external data request that comprises at least a portion of the secure data;
• determine, by the third party cloud computing environment, based on a data type of the portion of the secure data, whether an external data provider is authorised to receive the portion of the secure data;
• in response to determining that the external data provider is authorised to receive the portion of the secure data, send, by the third party cloud computing environment, the encrypted external data request to the external data provider;
• receive, in response to the encrypted external data request, external data from the external data provider at the third party cloud computing environments;
• store, in the secure portion of the third party cloud computing environment, the received external data;
• and
• in response to determining that the external data provider is not authorised to receive the portion of the secure data, block the encrypted external data request from being transmitted to the external data provider,
• wherein the user is different from a party that controls the third party cloud computing environment,
• wherein the user is different from a party that controls the secure data provider, and
• wherein the external data provider is different from the party that controls the secure data provider.

A non-transitory computer readable medium storing instructions that, when executed by one or more computer processors in a third-party cloud computing environment, cause the one or more computer processors to:

• receive computer executable code from a user of the third party cloud computing environment;
• provide the computer executable code in a secure portion of the third party cloud computing environment, wherein the secure portion is controlled by a secure data provider independently of the user, and wherein the secure portion is hosted by cloud computing environment hardware on one or more servers of the third party cloud computing environment;
• execute the computer executable code in the secure portion to request secure data from the secure data provider and to receive the secure data from the secure data provider;
• further execute the computer executable code in the secure portion to generate an encrypted external data request that comprises at least a portion of the secure data;
• determine, by the third party cloud computing environment, based on a data type of the portion of the secure data, whether an external data provider is authorised to receive the portion of the secure data;
• in response to determining that the external data provider is authorised to receive the portion of the secure data, send, by the third party cloud computing environment, the encrypted external data request to the external data provider;
• receive, in response to the encrypted external data request, external data from the external data provider at the third party cloud computing environment;
• store, in the secure portion of the third party cloud computing environment, the received external data;
• and
• in response to determining that the external data provider is not authorised to receive the portion of the secure data, block the encrypted external data request from being transmitted to the external data provider,
• wherein the user is different from a party that controls the third party cloud computing environment,
• wherein the user is different from a party that controls the secure data provider, and
• wherein the external data provider is different from the party that controls the secure data provider.