Systems and methods for implementing transparent encryption

A system comprising:

• a first server comprising a key manager, wherein the first server is configured to:
• receive, at the key manager, an encryption key policy;
• receive, at the key manager, from a web resource, one or more user identifiers and one or more resource locators, wherein the web resource comprises a file store accessible to a plurality of users and is operated by a resource administrator;
• define, at the key manager, an access control list based on a selection of user identifiers;
• associate, at the key manager, the access control list and the encryption key policy with a first resource locator from the one or more resource locators;
• generate, at the key manager, an encryption key and a key identifier for the first resource locator;
• establish a secure communication channel between the first server and a second server;
• and
• send, from the first server, to the second server, encryption information using the secure communication channel, wherein the encryption information comprises:
• the encryption key, the key identifier, and the access control list;
• and
• the second server comprising a transparent encryption module, wherein the second server is configured to:
• store, at the transparent encryption module, the encryption key and the access control list in protected memory;
• receive, at the transparent encryption module, from a client device, an input comprising a request to access a first resource stored in the web resource and a user identifier;
• determine, at the transparent encryption module, that the user identifier is included in the access control list for the first resource;
• encrypt, at the transparent encryption module, using the encryption key, data that is passed from the client device to the first resource;
• and
• decrypt, at the transparent encryption module, using the encryption key, data that is passed from the first resource to the client device.

A plurality non-transitory computer-readable media, comprising:

• a first non-transitory computer-readable medium comprising first instructions which, when executed by a first server, causes the first server to:
• receive an encryption key policy;
• receive from a web resource, one or more user identifiers and one or more resource locators, wherein the web resource comprises a file store accessible to a plurality of users and is operated by a resource administrator;
• define an access control list based on a selection of user identifiers;
• associate the access control list and the encryption key policy with a first resource locator from the one or more resource locators;
• generate an encryption key and a key identifier for the first resource locator;
• establish a secure communication channel between the first server and a second server;
• and
• send, from the first server, to the second server, encryption information using the secure communication channel, wherein the encryption information comprises:
• the encryption key, the key identifier, and the access control list;
• and
• a second non-transitory computer-readable medium comprising second instructions which, when executed by a second server, causes the second server to:
• store the encryption key and the access control list in protected memory;
• receive from a client device, an input comprising a request to access a first resource stored in the web resource and a user identifier;
• determine that the user identifier is included in the access control list for the first resource;
• encrypt, using the encryption key, data that is passed from the client device to the first resource;
• and
• decrypt, using the encryption key, data that is passed from the first resource to the client device.