Systems and methods for facilitating ingestion of encrypted communications received across cloud computing networks
AssigneeCapital One Services, LLC
InventorManikandan Rajaram
Life of this patent
Estimating the term…
Abstract
Systems and methods for a document management system that uses a routing logic for ingesting encrypted communications received across the cloud computing network. By allowing ingested communications to be encrypted, the document management system does not subject the communications to the aforementioned vulnerabilities. Furthermore, using its routing logic, the system enables the document management system to maintain its functionality.
Claims20
A system for facilitating ingestion of encrypted communications received across cloud computing networks with multi-tenancy architectures at document management systems featuring versioning capabilities, the system comprising:
- one or more processors;
- and
- one or more non-transitory, computer readable mediums comprising instructions recorded thereon that when executed by the one or more processors cause operations comprising:
- receiving a first encrypted communication, wherein the first encrypted communication was encrypted using a first ephemeral key for a first tenant prior to an upload service application programming interface of a document management system being called;
- calling the upload service application programming interface of the document management system;
- processing, using a routing logic, the first encrypted communication by directing the first encrypted communication to an entitlement router, wherein the routing logic comprises a rule set for ingesting communications into the document management system;
- processing, at the entitlement router, the first encrypted communication to determine that the first encrypted communication corresponds to the first tenant;
- selecting a first compute instance container from a plurality of compute instance container based on the first tenant;
- decrypting, at the first compute instance container, the first encrypted communication based on first permissions of the first tenant to generate a first decrypted communication;
- storing the first decrypted communication at a first public cloud storage resource corresponding to the first tenant, wherein the first decrypted communication is re-encrypted using an encryption native to the document management system;
- and
- providing a first reference to the first decrypted communication at the first public cloud storage resource to the document management system.
A method of facilitating ingestion of encrypted communications received across cloud computing networks with multi-tenancy architectures at document management systems featuring versioning capabilities, the method comprising:
- receiving a first encrypted communication, wherein the first encrypted communication was encrypted using a first ephemeral key for a first tenant prior to an upload service application programming interface of a document management system being called;
- processing, using a routing logic, the first encrypted communication by directing the first encrypted communication to an entitlement router, wherein the routing logic comprises a rule set for ingesting communications into the document management system;
- processing, at the entitlement router, the first encrypted communication to determine that the first encrypted communication corresponds to the first tenant;
- storing a first decrypted communication corresponding to the first encrypted communication at a first public cloud storage resource, wherein the first public cloud storage resource corresponds to the first tenant, and wherein the first decrypted communication is re-encrypted using an encryption native to the document management system;
- and
- providing a first reference to the first decrypted communication at the first public cloud storage resource to the document management system.
One or more non-transitory, computer-readable mediums, comprising instructions that, when executed by one or more processors, cause operations comprising:
- receiving a first encrypted communication;
- processing, using a routing logic, the first communication by directing the first encrypted communication to an entitlement router, wherein the routing logic comprises a rule set for ingesting communications into a document management system;
- processing, at the entitlement router, the first communication to determine that the first encrypted communication corresponds to a first tenant;
- decrypting the first encrypted communication based on first permissions of the first tenant to generate a first decrypted communication;
- storing a first decrypted communication corresponding to the first encrypted communication at a first public cloud storage resource, wherein the first public cloud storage resource corresponds to the first tenant, and wherein the first decrypted communication is re-encrypted using an encryption native to the document management system;
- and
- providing a first reference to the first decrypted communication at the first public cloud storage resource to the document management system.
Dependencies are inferred from the claim text.