Attested end-to-end encryption for transporting sensitive data

1. A computer-implemented method, comprising:

receiving, in a secure environment of a storage server, a policy profile from a data transfer service, the policy profile including an origination key and a destination key, and the origination key corresponding to a public transfer key of a data transfer application that is associated with a transfer of particular sensitive data from the data transfer application to the storage server;

verifying, by the storage server in the secure environment, the policy profile based at least in part on determining that the destination key corresponds to a public transfer key of the data transfer application;

receiving, by the storage server, a signed encrypted data encryption key from the data transfer application;

receiving, by the storage server, encrypted data from the data transfer application for subsequent decryption of the encrypted data;

verifying, by the storage server, the signed encrypted data encryption key originated from the data transfer application based at least in part on determining that the signed encrypted data key is signed with a private attestation identity key that corresponds to a public attestation identity key of the data transfer application; and

decrypting, by the storage server, the encrypted data using a private transfer key of the storage server, the decrypted data corresponding to the particular sensitive data.

2. The computer-implemented method of claim 1 , wherein the method further comprises:

receiving, by the storage server in the secure environment, a request for the public transfer key of the storage server that is associated with the transfer of the particular sensitive data from the data transfer application to the storage server;

generating, by the storage server in the secure environment, the public transfer key of the storage server, the public transfer key being signed with a private attestation identity key of the storage server; and

transmitting, by the storage server, the signed public transfer key to the data transfer service.

3. The computer-implemented method of claim 1 , wherein the method further comprises:

receiving, in the secure environment of the storage server, a request from the data transfer service for a public attestation identity key that corresponds to the private attestation identity key of the storage server;

generating, by the storage server in the secure environment, the public attestation identity key and the corresponding private attestation identity key; and

transmitting, by the storage server, the public attestation identity key to the data transfer service.

4. The computer-implemented method of claim 3 , wherein the public attestation identity key is signed by the storage server with a private endorsement key of the storage server, and wherein a public endorsement key corresponding to the private endorsement key is used by the storage server to verify the signed public attestation identity key of the storage server.

5. The computer-implemented method of claim 1 , wherein the secure environment includes a trusted platform module (TPM).

6. The computer-implemented method of claim 5 , wherein the private attestation identity key is generated based at least in part on the trusted platform module of the storage server.

7. The computer-implemented method of claim 1 , wherein a public attestation identity key corresponding to the private attestation identity key of the storage server is included within a second policy profile that is received by the data transfer application from the data transfer service, the public attestation identity key being used by the storage server to verify that the signed encrypted data encryption key originated from the data transfer application.

8. The computer-implemented method of claim 1 , wherein the method further comprises receiving, by the data transfer application in the secure environment, a pair of transfer keys including the public transfer key and a corresponding private transfer key of the storage server, the pair of transfer keys being provisioned to the storage server from the data transfer service and associated with the transfer of the particular sensitive data from the data transfer application to the storage server.

9. A device, comprising:

a processor; and

a computer-readable medium including instructions that, when executed by the processor, cause the processor to:

receive a policy profile from a data transfer service, the policy profile including an origination key and a destination key, and the origination key corresponding to a public transfer key of a data transfer application that is associated with a transfer of particular sensitive data from the data transfer application to a storage server;

verify the policy profile based at least in part on determining that the destination key corresponds to a public transfer key of the storage server;

receive a signed encrypted data encryption key from the data transfer application;

receive encrypted data from the data transfer application for subsequent decryption of the encrypted data;

verify the signed encrypted data encryption key originated from the data transfer application based at least in part on determining that the signed encrypted data key is signed with a private attestation identity key that corresponds to a public attestation identity key of the data transfer application; and

decrypt the encrypted data using a private transfer key of the storage server, the decrypted data corresponding to the particular sensitive data.

10. The device of claim 9 , wherein the instructions, when executed, further cause the processor to:

receive a request for the public transfer key of the storage server that is associated with the transfer of the particular sensitive data from the data transfer application to the storage server;

generate the public transfer key of the storage server, the public transfer key being signed with a private attestation identity key of the storage server; and

transmit the signed public transfer key to the data transfer service.

11. The device of claim 9 , wherein the instructions, when executed, further cause the processor to:

receive a request from the data transfer service for a public attestation identity key that corresponds to the private attestation identity key of the storage server;

generate the public attestation identity key and the corresponding private attestation identity key; and

transmit the public attestation identity key to the data transfer service.

12. The device of claim 11 , wherein the public attestation identity key is signed by the storage server with a private endorsement key of the storage server, and wherein a public endorsement key corresponding to the private endorsement key is used by the storage server to verify the signed public attestation identity key of the storage server.

13. The device of claim 9 , wherein the secure environment includes a trusted platform module (TPM).

14. The device of claim 13 , wherein the private attestation identity key is generated based at least in part on the trusted platform module of the storage server.

15. The device of claim 9 , wherein a public attestation identity key corresponding to the private attestation identity key of the storage server is included within a second policy profile that is received by the data transfer application from the data transfer service, the public attestation identity key being used by the storage server to verify that the signed encrypted data encryption key originated from the data transfer application.

16. The device of claim 9 , wherein the instructions, when executed, further cause the processor to receive a pair of transfer keys including the public transfer key and a corresponding private transfer key of the storage server, the pair of transfer keys being provisioned to the storage server from the data transfer service and associated with the transfer of the particular sensitive data from the data transfer application to the storage server.

17. A non-transitory computer-readable medium including stored thereon a sequence of instructions that, when executed by a processor, causes the processor to perform operations comprising:

receiving a policy profile from a data transfer service, the policy profile including an origination key and a destination key, the origination key corresponding to a public transfer key of a data transfer application that is associated with a transfer of particular sensitive data from the data transfer application to a storage server;

verifying the policy profile based at least in part on determining that the destination key corresponds to a public transfer key of the storage server;

receiving a signed encrypted data encryption key from the data transfer application;

receiving encrypted data from the data transfer application for subsequent decryption of the encrypted data;

verifying the signed encrypted data encryption key originated from the data transfer application based at least in part on determining that the signed encrypted data key is signed with a private attestation identity key that corresponds to a public attestation identity key of the data transfer application; and

decrypting the encrypted data using a private transfer key of the storage server, the decrypted data corresponding to the particular sensitive data.

18. The non-transitory computer-readable medium of claim 17 , wherein the operations further comprise:

receiving a request for the public transfer key of the storage server that is associated with the transfer of the particular sensitive data from the data transfer application to the storage server;

generating the public transfer key of the storage server, the public transfer key being signed with a private attestation identity key of the storage server; and

transmitting the signed public transfer key to the data transfer service.

19. The non-transitory computer-readable medium of claim 17 , wherein the operations further comprise:

receiving a request from the data transfer service for a public attestation identity key that corresponds to the private attestation identity key of the storage server;

generating the public attestation identity key and the corresponding private attestation identity key; and

transmitting the public attestation identity key to the data transfer service.

20. The non-transitory computer-readable medium of claim 19 , wherein the public attestation identity key is signed by the storage server with a private endorsement key of the storage server, and wherein a public endorsement key corresponding to the private endorsement key is used by the storage server to verify the signed public attestation identity key of the storage server.