US 2017/0374048 A1 · SYSTEMS AND METHODS FOR CLOUD DATA SECURITY

Abstract

Techniques for providing data security services with respect to cloud-based services are described. Examples include a security service provider (“SSP”) configured to perform or provide one or more security-related services or functions with respect to or on behalf of some other system or service. The other system or service may be, for example, a cloud-based system that provides network-accessible services. The SSP allows a user of the cloud-based service to provide and manage one or more security-related services, such as data storage, encryption, decryption, key management, and the like. By using and controlling the SSP, the user can be confident that his or her data is being securely represented and stored, even though it is being operated upon by a cloud-based service that is not under the user's control.

Claims20

Dependent claims

A method for providing security services with respect to a remote cloud-based service, comprising in a security service provider module that is controlled by a first entity that is distinct from a second entity that controls the cloud-based service,

receiving a request from the cloud-based service to perform a security-related function including at least one of a storage or encryption operation, the request based on a policy that is specified by a user of the cloud-based service and that causes the cloud-based service to utilize the security service provider module to perform the security-related function;
and
performing the security-related function on behalf of the cloud-based service.

A non-transitory computer-readable medium including instructions that, when executed by a computing system, provide security services with respect to a remote cloud-based service comprising in a security service provider module that is controlled by a first entity that is distinct from a second entity that controls the cloud-based service, the method comprising:

receiving a request initiated by the cloud-based service to perform a security-related function including at least one of a storage or encryption operation, the request based on a policy that is specified by a user of the cloud-based service and that causes the cloud-based service to utilize the security service provider module to perform the security-related function;
and
performing the security-related function on behalf of the cloud-based service.

A computing system configured to provide security services with respect to a remote cloud-based service, the computing system controlled by an entity that does not control the remote cloud-based service, the computing system comprising:

a memory;
and
a security services provider module that is stored on the memory and that is configured, when executed, to
define a policy specified by a user of the cloud-based service, the policy causing the cloud-based service to utilize the security service provider module to perform a security-related function;
receive a request initiated by the cloud-based service to perform the security-related function including at least one of a storage or encryption operation, the request based on the policy;
and
perform the security-related function on behalf of the cloud-based service.

4 more elements

Dependencies are inferred from the claim text.

Systems and methods for cloud data security

Life of this patent

Systems and methods for cloud data security

Life of this patent

Abstract

Claims20