Method and system for providing a secure secrets proxy

A system for providing an encryption proxy comprising:

• at least one processor;
• and
• at least one memory coupled to the at least one processor, the at least one memory having stored therein instructions which when executed by any set of the one or more processors, perform a process for providing an encryption proxy, the process for providing an encryption proxy including:
• providing an encryption proxy in a first computing environment, the encryption proxy being a virtual asset instantiated in the first computing environment, the encryption proxy including encryption proxy authentication data, the encryption proxy authentication data for identifying the encryption proxy as a trusted virtual asset in the first computing environment;
• providing a secrets distribution management system, the secrets distribution management system being in a second computing environment, the secrets distribution management system having access to encryption key data representing one or more encryption keys, the secrets distribution management system controlling the distribution of the one or more encryption keys in accordance with one or more encryption key distribution policies;
• the encryption proxy providing the encryption proxy authentication data to the secrets distribution management system;
• the secrets distribution management system authenticating the encryption proxy and identifying the encryption proxy as a trusted virtual asset eligible to cache encryption key data in an remote encryption key cache outside the second computing environment;
• the encryption proxy generating cache encryption key request data representing a request for data representing one or more requested encryption keys to be cached in the remote encryption key cache;
• the encryption proxy providing the cache encryption key request data to the secrets distribution management system;
• and
• in response to the cache encryption key request data, the secrets distribution management system providing data representing the one or more requested encryption keys to the remote encryption key cache.

A secure secrets proxy, the secure secrets proxy being a virtual asset instantiated in a first computing environment, the secure secrets proxy including:

• secure secrets proxy authentication logic, the secure secrets proxy authentication logic for generating secure secrets proxy authentication data identifying the secure secrets proxy as a trusted virtual asset in the first computing environment to a secrets distribution management system in a second computing environment, the secrets distribution management system having access to secrets data representing one or more secrets, the secrets distribution management system controlling the distribution of the one or more secrets in accordance with one or more secrets distribution policies;
• a secure secrets cache;
• secure secrets proxy cache secrets request data generation logic for generating cache secrets request data representing a request for data representing one or more requested secrets to be cached in the secure secrets cache;
• secure secrets proxy cache secrets request data transmission logic for providing the cache secrets request data to the secrets distribution management system;
• and
• requested secrets receipt and caching logic for receiving and storing data representing the one or more requested secrets to be cached in the secure secrets cache.

An encryption proxy, the encryption proxy being a virtual asset instantiated in a first computing environment, the encryption proxy including:

• encryption proxy authentication logic, the encryption proxy authentication logic for generating encryption proxy authentication data identifying the encryption proxy as a trusted virtual asset in the first computing environment to a secrets distribution management system in a second computing environment, the secrets distribution management system having access to encryption key data representing one or more encryption keys, the secrets distribution management system controlling the distribution of the one or more encryption keys in accordance with one or more encryption key distribution policies;
• an encryption key cache;
• encryption proxy cache encryption key request data generation logic for generating cache encryption key request data representing a request for data representing one or more requested encryption keys to be cached in the encryption key cache;
• encryption proxy cache encryption key request data transmission logic for providing the cache encryption key request data to the secrets distribution management system;
• and
• requested encryption key receipt and caching logic for receiving and storing data representing the one or more requested encryption keys to be cached in the encryption key cache.