System and method for securing tenant data on a local appliance prior to delivery to a SaaS data center hosted application service

• US 20100198730A1
• Filed: 04/07/2010
• Published: 08/05/2010
• Est. Priority Date: 12/21/2007
• Status: Abandoned Application

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Inventors: Ahmed, Zahid N., Ramalingam, Harsha, Homer, Andrew Wilson
• Application Number:
  US12/798,597
• Publication Number:
  US 20100198730A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 16/24575 using context
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

An extensible servicing hosting platform is provided that supports the design, build and concurrent deployment of multiple web accessible services on a services hosting platform. The services hosting platform comprises a services hosting framework capable of hosting multiple service applications, each of which may be shared by multiple tenants that each customize their use of a particular application service by extending the application service to exploit run time platform services within a service execution pipeline. The services hosting framework may easily be leveraged by applications to decrease the time associated with developing, deploying and maintaining high quality services in a cost effective manner.

Claims

1. (canceled)

2. A method of seeding a storage device at a host data center with tenant data received encrypted on a storage medium includes the steps of:

extracting an encrypted custom key from the storage medium;

decrypting the encrypted custom key using a private certificate associated with a Vault Service of the host data center;

storing the decrypted custom key for the tenant by the Vault Service; and

decrypting the tenant data using the decrypted custom key.

10. The method according to claim 2, further comprising:

generating a custom key;

generating an index of the tenant data;

encrypting the index using a public key;

encrypting the tenant data using the custom key to provide encrypted tenant data; and

forwarding the encrypted tenant data together with the encrypted index to the host data center to enable the host to decrypt the encrypted index using the public key and manipulate the encrypted tenant data using the decrypted index.

11. The method according to claim 10, wherein generating the index of the tenant data uses underlying content of the tenant data.

12. The method according to claim 10, wherein generating the index of the tenant data uses free text indexing.

13. The method of claim 10, wherein generating the index of tenant data uses a schema downloaded from the host prior to indexing the tenant data.

3-9. -9. (canceled)

14. A host platform, comprising:

a storage device for storing encrypted tenant data and an encrypted index to the encrypted tenant data, wherein the encrypted tenant data and the encrypted index to the tenant data are encrypted using different keys; and

a computer readable storage medium having program code stored thereon operable when executed by a processor of the host platform to provide a service to a customer associated with the encrypted tenant data using the decrypted index of the tenant data.

15. The host platform of claim 14, wherein a key used to encrypt the tenant data is unavailable to the host platform.

16. The host platform of claim 14, wherein a key used to encrypt the tenant data is stored by a vault service of the host platform.

17. A computer readable storage medium storing computer software seeds a storage device at a host data center with tenant data received encrypted, the computer software comprising:

executable code that extracts an encrypted custom key from the storage medium;

executable code that decrypts the encrypted custom key using a private certificate associated with a vault service of the host data center;

executable code that stores the decrypted custom key for the tenant by the vault service; and

executable code that decrypts the tenant data using the decrypted custom key.

18. The computer readable storage medium according to claim 17, further comprising:

executable code that generates a custom key that is unencrypted;

executable code that generates an index of the tenant data;

executable code that encrypts the index using a public key;

executable code that encrypts the tenant data using the custom key to provide encrypted tenant data; and

executable code that forwards the encrypted tenant data together with the encrypted index to the host data center to enable the host to decrypt the encrypted index using the public key and manipulate the encrypted tenant data using the decrypted index.

19. The computer readable storage medium according to claim 17, wherein the executable code that generates the index of the tenant data includes executable code that uses underlying content of the tenant data.

20. The computer readable storage medium according to claim 17, wherein the executable code that generates the index of the tenant data includes executable code that uses free text indexing.

21. The computer readable storage medium according to claim 17, wherein the executable code that generates the index of tenant data includes executable code that uses a schema downloaded from the host prior to indexing the tenant data.