System and method for encryption in a content management environment
Embodiments of content management systems that utilize encryption are disclosed. An object management module of a content management system is adapted to encrypt an object using a data key that is generated based on the content. The data key is encrypted using a tenant key associated with a tenant of the system. The encrypted object is stored in an object store, and a storage record for the stored encrypted object is stored in a data store, along with the encrypted data key and a tenant key identifier.
1. A content management system, comprising:
a first processor located in a first data center;
a first object store located in the first data center;
a first data store located in the first data center;
a non-transitory computer readable medium, comprising instructions for:
providing an interface that:
encrypts content,
stores the encrypted content in the first object store,
stores an entry for the encrypted content in the first data store, and
places a message in a queue, the message indicating that a storage event for the encrypted content has occurred, the message including an identifier associated with the encrypted content; and
a first replication management module located in the first data center for;
accessing the message from the queue;
obtaining the entry for the encrypted content from the first data store;
obtaining the encrypted content from the first object store;
providing a request for replication of the encrypted content to a second replication management module located in a second data center, the request including the encrypted content and information from the entry, for storage of the encrypted content in a second object store located in the second data center and storage of the information from the entry in a second data store located in the second data center, without transmission of a decrypted version of the encrypted content, and without transmission of a decrypted version of a data key used to decrypt the encrypted content.
2. The content management system of claim 1 , further comprising:
a second processor located in the second data center;
the second object store located in the second data center;
the second data store located in the second data center;
a second non-transitory computer readable medium, comprising instructions for:
the second replication management module located in the second data center for:
receiving, from the first replication management module, the request for replication of the encrypted content, without transmission of a decrypted version of the encrypted content, and without transmission of a decrypted version of a data key used to decrypt the encrypted content;
storing the encrypted content in the second object store; and
storing the information from the entry in the second data store.
3. The content management system of claim 2 , wherein:
the second replication management module located in the second data center is further for:
obtaining a second entry for the encrypted content from the second data store;
obtaining the encrypted content from the second object store;
providing a request for replication of the encrypted content to a third replication management module located in a third data center, the request including the encrypted content and information from the second entry, for storage of the encrypted content in a third object store located in the third data center and storage of the information from the second entry in a third data store located in the third data center, without transmission of a decrypted version of the encrypted content, and without transmission of a decrypted version of a data key used to decrypt the encrypted content.
4. The content management system of claim 1 , wherein the entry for the encrypted content includes a storage record, an encrypted version of a data key used to encrypt the encrypted content, and a tenant key identifier.
5. The content management system of claim 1 , wherein the interface places a second message in the queue, the second message indicating that a delete event for the for the encrypted content has occurred, the second message including the identifier associated with the encrypted content, wherein
the first replication management module:
accesses the second message from the queue; and
provides a request for deletion of the encrypted content to the second replication module, the request for deletion including the identifier associated with the encrypted content.
6. The content management system of claim 1 , wherein the first object store is included in a same storage device as the first data store.
7. The content management system of claim 1 , wherein the first object store is included in a different storage device from the first data store.