Security access protection for user data stored in a cloud computing facility

A proxy server comprising:

• a first interface for coupling in a communicating relationship with one or more of a plurality of cloud computing facilities;
• a second interface for coupling in a communicating relationship with a client device;
• a memory storing access credentials for enabling user access to the proxy server and a plurality of corresponding proxy access credentials for enabling the proxy server to link the user-provided access credentials to the proxy access credentials and use thereof to enable a user to access with the one or more of the plurality of cloud computing facilities through the proxy server;
• and
• a processor configured to secure communications through the first interface and the second interface, to receive a request from the client device, to verify an identity of the user against the access credentials, to assess a security state of the client device, and to conditionally grant access through the proxy server to one of the plurality of cloud computing facilities using a corresponding one of the plurality of proxy access credentials when the security state is in compliance with a security policy.

A system comprising:

• a client device having a user;
• a plurality of cloud computing facilities, each accessible with one of a plurality of proxy access credentials;
• a proxy server configured for secure communications with the client device and the plurality of cloud computing facilities, the proxy server including a memory that stores the plurality of proxy access credentials for the plurality of cloud computing facilities, along with access credentials for the user to access the proxy server, and the proxy server further including a processor configured to conditionally grant access by the user to one or more of the plurality of cloud computing facilities through the proxy server with a corresponding one of the plurality of proxy access credentials based upon a verification of an identity of the user against the access credentials and a verification that a security state of the client device is in compliance with a security policy;
• and
• a transfer of data from the client device to the one of the plurality of cloud computing facilities, wherein the data that is transferred is at least one of tokenized and encrypted.