Data mapping using trust services

At a computer system including at least one processor, a computer-implemented method for accessing data stored in a database using a policy identifier, the method comprising the following:

• accessing a policy identifier that includes a database schema identifier that identifies a database schema associated with a database in which data is stored, the database schema defining relationships for data stored in the database, wherein a portion of data is encrypted using a type of encryption specified in an encryption policy, the policy identifier further including a namespace identifier that identifies a set of databases in which the specified portion of data is accessed in the same manner;
• using the accessed policy identifier to access the encryption policy indicating the encryption type for the encrypted portion of data stored in the database;
• and
• using the accessed policy identifier to access the encrypted portion of data according to the encryption type indicated in the encryption policy.

At a computer system including at least one processor, a computer-implemented method for mapping encryption policies to user data stored in a database using a policy identifier, the method comprising the following:

• receiving an indication that identifies which type of encryption is to be applied when encrypting a specified portion of data stored in a database, the database having a database schema identified by a database schema identifier, the database schema defining relationships for data stored in the database;
• accessing a namespace that identifies a set of one or more databases in which the specified portion of data is accessed in the same manner;
• and
• generating a policy identifier, wherein the policy identifier comprises information including the namespace and the database schema identifier.