# US 2018/0025168 A1 · Virtual service provider zones > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0025168 A1 - Document ID: US20180025168A1 - Status: Published application - Kind: A1 - Application number: 15/712,043 - Filed: 2017-09-21 - Published: 2018-01-25 - Earliest claimed: 2013-07-01 - Assignees: Amazon Technologies, Inc. - Applicants: Amazon Technologies, Inc. - Inventors: Gregory Branchek Roth; Eric Jason Brandwine; Matthew James Wren - Web page: https://patentgrep.com/patent/US20180025168A1 ## CPC - G06F 21/602: {Providing cryptographic facilities or services} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A service proxy services as an application programming interface proxy to a service, which may involve data storage. When a request to store data is received by the service proxy, the service proxy encrypts the data and stores the data in encrypted form at the service. Similarly, when a request to retrieve data is received by the service proxy, the service proxy obtains encrypted data from the service and decrypts the data. The data may be encrypted using a key that is kept inaccessible to the service. ## Claims ### Claim 1 A system, comprising: memory to store instructions that, if executed by one or more processors of the system, cause the system to: identify data to be stored in a first data storage device at a first location and a second data storage device at a different second location; encrypt, based at least in part on a storage requirement associated with the different second location, a portion of the data; and cause storage of the encrypted portion on the second data storage device. ### Claim 2 (depends on 1) The system of claim 1, wherein the storage requirement differs from another storage requirement associated with the first location. ### Claim 3 (depends on 2) The system of claim 2, wherein the storage requirement includes a set of regulations associated with a legal jurisdiction that is different from the other storage requirement that includes a second set of regulations associated with a second legal jurisdiction. ### Claim 4 (depends on 2) The system of claim 2, wherein the storage requirement includes a set of administrative controls that is different from the other storage requirement that includes a second set of administrative controls. ### Claim 5 (depends on 1) The system of claim 1, wherein the first data storage device at the first location operates as a proxy to the second data storage device at the different second location. ### Claim 6 (depends on 1) The system of claim 1, wherein the encrypted portion of the data is encrypted using a key to generate encrypted data, the key being accessible to the first data storage device while inaccessible to the second data storage device. ### Claim 7 (depends on 6) The system of claim 6, wherein the key is managed by a cryptography service associated with the first data storage device. ### Claim 8 A computer-implemented method, comprising: identifying data to be stored in a first data storage device at a first location and a second data storage device at a different second location; encrypting, based at least in part on a storage requirement associated with the different second location, a portion of the data; and causing storage of the encrypted portion on the second data storage device. ### Claim 9 (depends on 8) The computer-implemented method of claim 8, wherein the storage requirement differs from another storage requirement associated with the first location. ### Claim 10 (depends on 9) The computer-implemented method of claim 9, wherein the storage requirement includes a set of regulations associated with a legal jurisdiction that is different from the other storage requirement that includes a second set of regulations associated with a second legal jurisdiction. ### Claim 11 (depends on 9) The computer-implemented method of claim 9, wherein the storage requirement includes a set of administrative controls that is different from the other storage requirement that includes a second set of administrative controls. ### Claim 12 (depends on 8) The computer-implemented method of claim 8, wherein the first data storage device at the first location operates as a proxy to the second data storage device at the different second location. ### Claim 13 (depends on 8) The computer-implemented method of claim 8, wherein the encrypted portion of the data is encrypted using a key to generate encrypted data, the key being accessible to the first data storage device while inaccessible to the second data storage device. ### Claim 14 (depends on 13) The computer-implemented method of claim 13, wherein the key is managed by a cryptography service associated with the first data storage device. ### Claim 15 A non-transitory computer-readable storage medium having stored thereon executable instructions that, if executed by one or more processors of a computer system, cause the computer system to at least: identify data to be stored in a first data storage device at a first location and a second data storage device at a different second location; encrypt, based at least in part on a storage requirement associated with the different second location, a portion of the data; and cause storage of the encrypted portion on the second data storage device. ### Claim 16 (depends on 15) The non-transitory computer-readable storage medium of claim 15, wherein the storage requirement differs from another storage requirement associated with the first location. ### Claim 17 (depends on 16) The non-transitory computer-readable storage medium of claim 16, wherein the storage requirement includes at least one of: a set of regulations associated with a legal jurisdiction that is different from the other storage requirement that includes a second set of regulations associated with a second legal jurisdiction; or a set of administrative controls that is different from the other storage requirement that includes a second set of administrative controls. ### Claim 18 (depends on 15) The non-transitory computer-readable storage medium of claim 15, wherein the first data storage device at the first location operates as a proxy to the second data storage device at the different second location. ### Claim 19 (depends on 15) The non-transitory computer-readable storage medium of claim 15, wherein the encrypted portion of the data is encrypted using a key to generate encrypted data, the key being accessible to the first data storage device while inaccessible to the second data storage device. ### Claim 20 (depends on 19) The non-transitory computer-readable storage medium of claim 19, wherein the key is managed by a cryptography service associated with the first data storage device.