Concealment of customer sensitive data in virtual computing arrangements
Aspects described herein are directed to the concealment of customer sensitive data in virtual computing arrangements. A local computing platform may receive an object including a customer sensitive object name from a user computing device operating on a same internal domain as the local computing platform. The local computing platform may conceal the customer sensitive object name from a virtual computing platform operating on a domain external from the internal domain. The local computing platform may provide the concealed object name to the virtual computing platform for facilitating object enumeration requests from the user computing device during virtual computing sessions. During a virtual computing session between the user computing device and virtual computing platform, the local computing platform may receive the concealed object name from the user computing device and may perform one or more operations to reveal the object name to the user computing device.
1. A method, comprising:
receiving at a computing platform and from a user computing device, an object including an object name;
extracting the object name associated with the object;
concealing, using an encryption key, the object name to create a concealed object name identifying the object for presentation on a virtual computing platform;
transmitting the encryption key to the user computing device; and
transmitting the concealed object name to the virtual computing platform.
2. The method of claim 1 , further comprising:
responsive to an enumeration request provided by the user computing device to the virtual computing platform, receiving the concealed object name during a virtual computing instance between the user computing device and the virtual computing platform;
processing the concealed object name to reveal the object name of the object; and
providing the object name to the user computing device.
3. The method of claim 1 , further comprising:
prior to receiving the object from the user computing device, receiving an access request from the user computing device; and
authenticating a user of the user computing device.
4. The method of claim 3 , wherein transmitting the encryption key to the user computing device is responsive to concealing the object name.
5. The method of claim 1 , wherein concealing the object name involves the usage of one or more hashing operations.
6. The method of claim 1 , further comprising:
receiving, from the user computing device, a plurality of objects each associated with unique object names, wherein at least one of the plurality of objects is identified as being a secure object; and
based on identification of the secure object, concealing the unique object name of the secure object to create a concealed object name identifying the secure object.
7. The method of claim 5 , further comprising:
responsive to concealing the object name, transmitting a hash mapping to the user computing device.
8. An apparatus, comprising:
a processor; and
a memory storing computer-readable instructions that, when executed by the processor, cause the apparatus to:
receive, from a user computing device, an object including an object name;
extract the object name associated with the object;
conceal, using an encryption key, the object name to create a concealed object name identifying the object for presentation on a virtual computing platform;
transmit the encryption key to the user computing device; and
transmit the concealed object name to the virtual computing platform.
9. The apparatus of claim 8 , wherein the memory stores further computer-readable instructions that, when executed by the processor, cause the apparatus to:
responsive to an enumeration request provided by the user computing device to the virtual computing platform, receive the concealed object name during a virtual computing instance between the user computing device and the virtual computing platform;
process the concealed object name to reveal the object name of the object; and
provide the object name to the user computing device.
10. The apparatus of claim 8 , wherein the memory stores further computer-readable instructions that, when executed by the processor, cause the apparatus to:
prior to receiving the object from the user computing device, receive an access request from the user computing device; and
authenticate a user of the user computing device.
11. The apparatus of claim 10 , wherein transmitting the encryption key to the user computing device is responsive to concealing the object name.
12. The apparatus of claim 8 , wherein concealing the object name involves the usage of one or more hashing operations.
13. The apparatus of claim 8 , wherein the memory stores further computer-readable instructions that, when executed by the processor, cause the apparatus to:
receive, from the user computing device, a plurality of objects each associated with unique object names, wherein at least one of the plurality of objects is identified as being a secure object; and
based on identification of the secure object, conceal the unique object name of the secure object to create a concealed object name identifying the secure object.
14. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor and memory, cause the computing platform to:
receive, from a user computing device, an object including an object name;
extract the object name associated with the object;
conceal, using an encryption key, the object name to create a concealed object name identifying the object for presentation on a virtual computing platform;
transmit the encryption key to the user computing device; and
transmit the concealed object name to the virtual computing platform.
15. The one or more non-transitory computer-readable media of claim 14 storing further instructions that, when executed by the computing platform comprising at least the one processor and the memory, cause the computing platform to:
responsive to an enumeration request provided by the user computing device to the virtual computing platform, receive the concealed object name during a virtual computing instance between the user computing device and the virtual computing platform;
process the concealed object name to reveal the object name of the object; and
provide the object name to the user computing device.
16. The one or more non-transitory computer-readable media of claim 14 storing further instructions that, when executed by the computing platform comprising at least the one processor and the memory, cause the computing platform to:
prior to receiving the object from the user computing device, receive an access request from the user computing device; and
authenticate a user of the user computing device.
17. The one or more non-transitory computer-readable media of claim 14 , wherein concealing the object name involves the usage of one or more hashing operations.
18. The one or more non-transitory computer-readable media of claim 17 , wherein transmitting the encryption key to the user computing device is responsive to concealing the object name.
19. The one or more non-transitory computer-readable media of claim 14 storing further instructions that, when executed by the computing platform comprising at least the one processor and the memory, cause the computing platform to:
receive, from the user computing device, a plurality of objects each associated with unique object names, wherein at least one of the plurality of objects is identified as being a secure object; and
based on identification of the secure object, conceal the unique object name of the secure object to create a concealed object name identifying the secure object.
20. The one or more non-transitory computer-readable media of claim 17 , storing further instructions that, when executed by the computing platform comprising at least the one processor and the memory, cause the computing platform to:
responsive to concealing the object name, transmit a hash mapping to the user computing device.