System, method, and computer program for transmitting data between a backup system and an external application using an encryption proxy within a customer-controlled data perimeter
The present disclosure describes a system, method, and computer program for transmitting data between a backup system and an external application using an encryption proxy that is within a customer-controlled data perimeter. The encryption proxy virtually resides within a customer-controlled data perimeter and acts as an intermediary between the external application and backup system. The backup system is outside the customer-controlled data perimeter. Data is transferred between the external application and the backup system to perform backup and recovery operations. The encryption proxy encrypts and decrypts data messages between the external application and the backup application in accordance with configurable data transfer rules. The encryption proxy enables a customer to control which data items are transferred to the backup system in clear text and which data items are encrypted before being forwarded to the backup system. When performing a restore operation, encrypted data items transmitted from the backup application enroute to the external application are converted back to cleartext by the encryption proxy so that they are received as cleartext by the external application.
1 . A method, performed by a computer system, for transmitting customer data between a backup system and an external application while preventing the backup system from viewing sensitive data at any stage of a backup or restore process, the method comprising:
providing an encryption proxy between a backup system and an external application, wherein the encryption proxy is within a customer-controlled data perimeter and wherein the backup system is outside the customer-controlled data perimeter;
enabling a customer to configure data transfer rules that specify 1) which types of messages transmitted between the backup system and the external application require encryption or decryption and 2) a set of data items in the customer data corresponding to the messages that are permitted in cleartext beyond the customer-controlled data perimeter;
transmitting messages between the external application and the backup system via the encryption proxy, wherein:
when the encryption proxy receives a message with a data payload having data items from the external application for transmission to the backup system, the encryption proxy converts the data items to ciphertext, except for those data items permitted in cleartext beyond the customer-controlled data perimeter per the configurable data transfer rules, before forwarding the message to the backup system; and
when the encryption proxy receives a message from the backup system to the external application having a data payload with one or more data items in ciphertext, the encryption proxy converts said data items from ciphertext to cleartext before forwarding the message to the external application.
2 . The method of claim 1 , wherein transmitting a message from the backup system to the external application via the encryption proxy comprises the following steps:
receiving a message at the encryption proxy from the backup system and intended for the external application;
determining whether the message requires any decryption based on the configurable data transfer rules;
if the configurable data transfer rules indicate that the message does not require decryption, forwarding the message from the encryption proxy to the external application without performing any decryption on the message;
if the configurable data transfer rules indicate that the message requires decryption, performing the following:
identifying a plurality of ciphertext data items in the message that require decryption based on the configurable data transfer rules;
decrypting the identified data items to transform the plurality of ciphertext data items to cleartext; and
transmitting the message to the external application with the cleartext data items.
3 . The method of claim 1 , wherein transmitting a message from the external application to the backup system via the encryption proxy comprises the following steps:
receiving a message at the encryption proxy that is transmitted from the external application and intended for the backup system;
determining whether the message requires any encryption based on configurable data transfer rules;
if the configurable data transfer rules indicate that the message does not require encryption, forwarding the message from the encryption proxy to the backup system without performing any encryption on the message; and
if the configurable data transfer rules indicate that the message requires encryption, performing the following:
identifying a plurality of data items in the message that are permitted in cleartext beyond the customer-controlled data perimeter;
encrypting all the data items in the message except for the identified plurality of data items; and
transmitting the message to the backup system.
4 . A non-transitory computer-readable medium comprising a computer program, that, when executed by a computer system, enables the computer system to perform the following steps for transmitting customer data between a backup system and an external application while preventing the backup system from viewing sensitive data at any stage of a backup or restore process, the steps comprising:
providing an encryption proxy between a backup system and an external application, wherein the encryption proxy is within a customer-controlled data perimeter and wherein the backup system is outside the customer-controlled data perimeter;
enabling a customer to configure data transfer rules that specify 1) which types of messages transmitted between the backup system and the external application require encryption or decryption and 2) a set of data items in the customer data corresponding to the messages that are permitted in cleartext beyond the customer-controlled data perimeter;
transmitting messages between the external application and the backup system via the encryption proxy, wherein:
when the encryption proxy receives a message with a data payload having data items from the external application for transmission to the backup system, the encryption proxy converts the data items to ciphertext, except for those data items permitted in cleartext beyond the customer-controlled data perimeter per the configurable data transfer rules, before forwarding the message to the backup system; and
when the encryption proxy receives a message from the backup system to the external application having a data payload with one or more data items in ciphertext, the encryption proxy converts said data items from ciphertext to cleartext before forwarding the message to the external application.
5 . The non-transitory computer-readable medium of claim 4 , wherein transmitting a message from the backup system to the external application via the encryption proxy comprises the following steps:
receiving a message at the encryption proxy from the backup system and intended for the external application;
determining whether the message requires any decryption based on the configurable data transfer rules;
if the configurable data transfer rules indicate that the message does not require decryption, forwarding the message from the encryption proxy to the external application without performing any decryption on the message;
if the configurable data transfer rules indicate that the message requires decryption, performing the following:
identifying a plurality of ciphertext data items in the message that require decryption based on the configurable data transfer rules;
decrypting the identified data items to transform the plurality of ciphertext data items to cleartext; and
transmitting the message to the external application with the cleartext data items.
6 . The non-transitory computer-readable medium of claim 4 , wherein transmitting a message from the external application to the backup system via the encryption proxy comprises the following steps:
receiving a message at the encryption proxy that is transmitted from the external application and intended for the backup system;
determining whether the message requires any encryption based on configurable data transfer rules;
if the configurable data transfer rules indicate that the message does not require encryption, forwarding the message from the encryption proxy to the backup system without performing any encryption on the message; and
if the configurable data transfer rules indicate that the message requires encryption, performing the following:
identifying a plurality of data items in the message that are permitted in cleartext beyond the customer-controlled data perimeter;
encrypting all the data items in the message except for the identified plurality of data items; and
transmitting the message to the backup system.
7 . A computer system for transmitting customer data between a backup system and an external application while preventing the backup system from viewing sensitive data at any stage of a backup or restore process, the system comprising:
one or more processors;
one or more memory units coupled to the one or more processors, wherein the one or more memory units store instructions that, when executed by the one or more processors, cause the system to perform the operations of:
providing an encryption proxy between a backup system and an external application, wherein the encryption proxy is within a customer-controlled data perimeter and wherein the backup system is outside the customer-controlled data perimeter;
enabling a customer to configure data transfer rules that specify 1) which types of messages transmitted between the backup system and the external application require encryption or decryption and 2) a set of data items in the customer data corresponding to the messages that are permitted in cleartext beyond the customer-controlled data perimeter;
transmitting messages between the external application and the backup system via the encryption proxy, wherein:
when the encryption proxy receives a message with a data payload having data items from the external application for transmission to the backup system, the encryption proxy converts the data items to ciphertext, except for those data items permitted in cleartext beyond the customer-controlled data perimeter per the configurable data transfer rules, before forwarding the message to the backup system; and
when the encryption proxy receives a message from the backup system to the external application having a data payload with one or more data items in ciphertext, the encryption proxy converts said data items from ciphertext to cleartext before forwarding the message to the external application.
8 . The system of claim 7 , wherein transmitting a message from the backup system to the external application via the encryption proxy comprises the following steps:
receiving a message at the encryption proxy from the backup system and intended for the external application;
determining whether the message requires any decryption based on the configurable data transfer rules;
if the configurable data transfer rules indicate that the message does not require decryption, forwarding the message from the encryption proxy to the external application without performing any decryption on the message;
if the configurable data transfer rules indicate that the message requires decryption, performing the following:
identifying a plurality of ciphertext data items in the message that require decryption based on the configurable data transfer rules;
decrypting the identified data items to transform the plurality of ciphertext data items to cleartext; and
transmitting the message to the external application with the cleartext data items.
9 . The system of claim 7 , wherein transmitting a message from the external application to the backup system via the encryption proxy comprises the following steps:
receiving a message at the encryption proxy that is transmitted from the external application and intended for the backup system;
determining whether the message requires any encryption based on configurable data transfer rules;
if the configurable data transfer rules indicate that the message does not require encryption, forwarding the message from the encryption proxy to the backup system without performing any encryption on the message; and
if the configurable data transfer rules indicate that the message requires encryption, performing the following:
identifying a plurality of data items in the message that are permitted in cleartext beyond the customer-controlled data perimeter;
encrypting all the data items in the message except for the identified plurality of data items; and
transmitting the message to the backup system.