Security system for data stored in the cloud
AssigneeTrend Micro Incorporated
InventorsBharath Kumar Chandrasekhar, Jeremy Hubble, Yusong Zhang
Life of this patent
Estimating the term…
Abstract
A cloud access security system provides security to data stored in the cloud. The cloud access security system maintains version service information that indicates servers that service web services calls to particular versions of a cloud application service. Upon detection of a web service call to an unknown version of the cloud application service, the cloud access security system redirects the web service call to a known good server that services web service calls that are made to a previous version of the cloud application service. The cloud access security system may employ an encryption scheme that allows for partial decryption.
Claims17
A computer-implemented method comprising:
- dividing email data into a plurality of chunks, the plurality of chunks including at least a first chunk and a second chunk, the plurality of chunks comprising more than two chunks;
- encrypting each individual chunk in the plurality of chunks to generate a plurality of encrypted chunks, the plurality of encrypted chunks including at least a first encrypted chunk corresponding to the first chunk and a second encrypted chunk corresponding to the second chunk;
- receiving the first encrypted chunk and the second encrypted chunk but not all of the plurality of encrypted chunks over a computer network;
- decrypting the first encrypted chunk to generate back the first chunk and the second encrypted chunk to generate back the second chunk;
- and
- after decrypting the first and second encrypted chunks, displaying an email message that comprises the first chunk decrypted from the first encrypted chunk and the second chunk decrypted from the second encrypted chunk without waiting for all of the plurality of encrypted chunks to be received and decrypted, the email message not including all of the email data divided into the plurality of chunks.
A system comprising:
- a cloud access security system that divides email data into a plurality of chunks that includes at least a first chunk and a second chunk and comprises more than two chunks, encrypts each individual chunk in the plurality of chunks to generate a plurality of encrypted chunks that includes at least a first encrypted chunk corresponding to the first chunk and a second encrypted chunk corresponding to the second chunk, provides the plurality of encrypted chunks to a cloud-based email system for storage, receives at least the first encrypted chunk and the second encrypted chunk but not all of the plurality of encrypted chunks back from the cloud-based email system, decrypts the first encrypted chunk received from the cloud-based email system back to the first chunk and the second encrypted chunk received from the cloud-based email system back to the second chunk without waiting to receive all of the plurality of encrypted chunks from the cloud-based email system, and provides at least the first chunk decrypted from the first encrypted chunk and the second chunk decrypted from the second encrypted chunk to a user computer without receiving all of the plurality of encrypted chunks from the cloud-based email system;
- the cloud-based email system that receives the plurality of encrypted chunks for storage, and provides at least the first encrypted chunk and the second encrypted chunk back to the cloud access security system;
- and
- the user computer that receives from the cloud access security system the first chunk decrypted from the first encrypted chunk and the second chunk decrypted from the second encrypted chunk, and displays an email message comprising the first chunk and the second chunk without waiting for all of the plurality of encrypted chunks to be received and decrypted by the cloud access security system.
A computer-implemented method comprising:
- dividing email data into a plurality of chunks;
- encrypting each individual chunk in the plurality of chunks to generate encrypted email data comprising a plurality of encrypted chunks;
- receiving a portion of the encrypted email data, the encrypted email data being an encrypted version of the email data;
- decrypting the portion of the encrypted email data to generate a portion of the email data without waiting to receive and decrypt an entirety of the encrypted email data;
- and
- providing the portion of the email data but not an entirety of the email data to a user computer.
Dependencies are inferred from the claim text.