System and method for securing tenant data on a local appliance prior to delivery to a SaaS data center hosted application service

Abstract

An extensible servicing hosting platform is provided that supports the design, build and concurrent deployment of multiple web accessible services on a services hosting platform. The services hosting platform comprises a services hosting framework capable of hosting multiple service applications, each of which may be shared by multiple tenants that each customize their use of a particular application service by extending the application service to exploit run time platform services within a service execution pipeline. The services hosting framework may easily be leveraged by applications to decrease the time associated with developing, deploying and maintaining high quality services in a cost effective manner.

1 . (canceled) 
     
     
         2 . A method of seeding a storage device at a host data center with tenant data received encrypted on a storage medium includes the steps of:
 extracting an encrypted custom key from the storage medium;   decrypting the encrypted custom key using a private certificate associated with a Vault Service of the host data center;   storing the decrypted custom key for the tenant by the Vault Service; and   decrypting the tenant data using the decrypted custom key.   
     
     
         3 - 9 . (canceled) 
     
     
         10 . The method according to  claim 2 , further comprising:
 generating a custom key;   generating an index of the tenant data;   encrypting the index using a public key;   encrypting the tenant data using the custom key to provide encrypted tenant data; and   forwarding the encrypted tenant data together with the encrypted index to the host data center to enable the host to decrypt the encrypted index using the public key and manipulate the encrypted tenant data using the decrypted index.   
     
     
         11 . The method according to  claim 10 , wherein generating the index of the tenant data uses underlying content of the tenant data. 
     
     
         12 . The method according to  claim 10 , wherein generating the index of the tenant data uses free text indexing. 
     
     
         13 . The method of  claim 10 , wherein generating the index of tenant data uses a schema downloaded from the host prior to indexing the tenant data. 
     
     
         14 . A host platform, comprising:
 a storage device for storing encrypted tenant data and an encrypted index to the encrypted tenant data, wherein the encrypted tenant data and the encrypted index to the tenant data are encrypted using different keys; and   a computer readable storage medium having program code stored thereon operable when executed by a processor of the host platform to provide a service to a customer associated with the encrypted tenant data using the decrypted index of the tenant data.   
     
     
         15 . The host platform of  claim 14 , wherein a key used to encrypt the tenant data is unavailable to the host platform. 
     
     
         16 . The host platform of  claim 14 , wherein a key used to encrypt the tenant data is stored by a vault service of the host platform. 
     
     
         17 . A computer readable storage medium storing computer software seeds a storage device at a host data center with tenant data received encrypted, the computer software comprising:
 executable code that extracts an encrypted custom key from the storage medium;   executable code that decrypts the encrypted custom key using a private certificate associated with a vault service of the host data center;   executable code that stores the decrypted custom key for the tenant by the vault service; and   executable code that decrypts the tenant data using the decrypted custom key.   
     
     
         18 . The computer readable storage medium according to  claim 17 , further comprising:
 executable code that generates a custom key that is unencrypted;   executable code that generates an index of the tenant data;   executable code that encrypts the index using a public key;   executable code that encrypts the tenant data using the custom key to provide encrypted tenant data; and   executable code that forwards the encrypted tenant data together with the encrypted index to the host data center to enable the host to decrypt the encrypted index using the public key and manipulate the encrypted tenant data using the decrypted index.   
     
     
         19 . The computer readable storage medium according to  claim 17 , wherein the executable code that generates the index of the tenant data includes executable code that uses underlying content of the tenant data. 
     
     
         20 . The computer readable storage medium according to  claim 17 , wherein the executable code that generates the index of the tenant data includes executable code that uses free text indexing. 
     
     
         21 . The computer readable storage medium according to  claim 17 , wherein the executable code that generates the index of tenant data includes executable code that uses a schema downloaded from the host prior to indexing the tenant data.