Policy-based topic-level encryption for message queues

A computer program product comprising a computer-readable storage medium having a set of instructions stored therein which, when executed by a processor, causes the processor to perform a topic-based encryption in a publish-subscribe messaging queue by:

• determining a first topic associated with a first message requires a first encryption level by reference to a topic-based encryption policy;
• providing to a first entity an encryption key for encrypting the first message according to the first encryption level to produce a first encrypted message;
• storing the first encrypted message in a message queuing system according to the first topic;
• receiving from a second entity a request for messages associated with the first topic including the first encrypted message;
• identifying a decryption key corresponding to the encrypted message according to the topic-based encryption policy with reference to the first topic;
• and
• sending to the second entity the first encrypted message for decryption by the second entity using the decryption key.

A computer system comprising:

• a processor set;
• and
• a computer readable storage medium having program instructions stored therein;
• wherein:
• the processor set executes the program instructions that cause the processor set to perform a topic-based encryption in a publish-subscribe messaging queue by:
• determining a first topic associated with a first message requires a first encryption level by reference to a topic-based encryption policy;
• providing to a first entity an encryption key for encrypting the first message according to the first encryption level to produce a first encrypted message;
• storing the first encrypted message in a message queuing system according to the first topic;
• receiving from a second entity a request for messages associated with the first topic including the first encrypted message;
• identifying a decryption key corresponding to the encrypted message according to the topic-based encryption policy with reference to the first topic;
• and
• sending to the second entity the first encrypted message for decryption by the second entity using the decryption key.

A computer-implemented method comprising:

• determining, by a producer, a first topic associated with a first message requires a first encryption level by reference to a topic-based encryption policy;
• encrypting, by the producer, the first message according to the first encryption level to produce an encrypted message;
• storing the encrypted message in a message queuing system according to the first topic;
• receiving from a consumer a subscription for messages associated with the first topic including the first message;
• identifying, by the consumer, a decryption key corresponding to the encrypted message according to the topic-based encryption policy with reference to the first topic;
• and
• decrypting, by the consumer, the encrypted message with the decryption key to reproduce the first message.