Data transfer protocol

A system, the system comprising:

• an intermediary device;
• a processor;
• a memory device that stores instructions that, when executed by the processor, causes the system to:
• transmit, to a second device and from the intermediary device in operative communication with the second device and a third device, a set of encryption keys corresponding to the third device, wherein the second device is trusted by the intermediary device and wherein the intermediary device is trusted by the third device;
• receive, at the intermediary device from the third device, an ephemeral set of encryption keys and an encapsulated secret;
• receive, at the intermediary device from the second device, a data payload comprising encrypted content and a key corresponding to the second device, wherein the encrypted content is encrypted by the second device using an encryption key corresponding to the second device and a key of the set of encryption keys corresponding to the third device and the encapsulated secret;
• and
• transmit, from the intermediary device to the third device, the data payload, wherein the transmitting comprises signing, by the intermediary device, the data payload.

A product, the product comprising:

• a computer-readable storage device that stores executable code that, when executed by a processor, causes the product to:
• transmit, to a second device and from an intermediary device in operative communication with the second device and a third device, a set of encryption keys corresponding to the third device, wherein the second device is trusted by the intermediary device and wherein the intermediary device is trusted by the third device;
• receive, at the intermediary device from the third device, an ephemeral set of encryption keys and an encapsulated secret;
• receive, at the intermediary device from the second device, a data payload comprising encrypted content and a key corresponding to the second device, wherein the encrypted content is encrypted by the second device using an encryption key corresponding to the second device and a key of the set of encryption keys corresponding to the third device and the encapsulated secret;
• and
• transmit, from the intermediary device to the third device, the data payload, wherein the transmitting comprises signing, by the intermediary device, the data payload.