Systems and methods for api-based encryption and key management

A system for implementing data encryption in an application using an application programming interface (API) comprising:

• a platform environment comprising:
• a user interface which receives application profile information, selects an encryption scheme and at least one client library, and creates a set of encryption keys for the application to store as credential information, and creates and stores a set of encryption keys;
• an application environment comprising:
• and
• an application which installs the at least one client library, credential information and API call information for encrypting data.

A method for managing data encryption and key management for an application using an application programming interface (API), the method comprising:

• creating an application profile for the application on an API-based platform, wherein the application profile includes:
• an encryption policy for encrypting application data;
• a number of instances on which the application will be running;
• and
• a number of authorized applications which will be accessing the application data;
• displaying a dashboard for each application which includes the encryption keys, encryption policy, instances of applications running and authorized applications;
• and
• providing options to rotate, replace, add or delete encryption keys for each of the instances and authorized applications.

A method for encrypting application data with an application programming interface (API), the method comprising:

• receiving application data from a client-side application;
• requesting an encryption key for the application data from an API-based platform;
• receiving the encryption key for encrypting the application data;
• encrypting the application data using the encryption key;
• and
• transmitting the encrypted application data to a data storage module.

A method for decrypting application data with an application programming interface (API), the method comprising:

• receiving encrypted application data from a data storage module;
• requesting an encryption key for the application data from an API-based platform;
• receiving the encryption key for decrypting the application data;
• decrypting the application data using the encryption key;
• and
• transmitting the decrypted application data to a client-side application.