Encryption of proxy session activity data using user-provided encryption keys

An apparatus comprising:

• a processor;
• and
• a memory on which is stored machine-readable instructions that when executed by the processor, cause the processor to:
• establish, via a proxy service at the apparatus, a proxy session between a client device and a server, the proxy session comprising session data communicated during the proxy session between the client device and the server;
• obtain an encryption key;
• generate session activity data based on the session data;
• identify private data in the session activity data;
• and
• encrypt the generated session activity data that includes the identified private data using the encryption key.

A method comprising:

• establishing, by a processor at a proxy server, a proxy session between a client device and a server, the proxy session comprising session data communicated during the proxy session between the client device and the server;
• receiving, by the processor, an encryption key;
• generating, by the processor, session activity data based on the session data;
• identifying, by the processor, private data among the session activity data;
• encrypting, by the processor, the identified private data among the session activity data using the encryption key;
• receiving, by the processor, a request to access the encrypted private data in the session activity data;
• decrypting, by the processor, encrypted private data among the session activity data using the encryption key;
• and
• outputting, by the processor, the session activity data including the decrypted private data.

A computer-readable medium on which is stored computer-readable instructions that, when executed by a processor, cause the processor to:

• authenticate, at a proxy server, a client device for a proxy session between the client device and a server, the proxy session comprising session data communicated during the proxy session between the client device and the server;
• based on the client device being authentic,
• obtain an encryption key for the client device;
• associate the encryption key to the client device;
• identify session activity data for the proxy session, the session activity data including information associated with events during the proxy session;
• identify private data among the session activity data;
• and
• encrypt the identified private data in the session activity data using the encryption key;
• receive a request for the encrypted session activity data;
• based on the received request for the encrypted session activity data, decrypt the encrypted private data among the session activity data using the encryption key associated with the client device;
• and
• output the decrypted session activity data.