Servicenow, Inc.

Pierre Francois Rohel

Martin Wexler

Siddharth Rajendra Shah

Shicheng Zhang

Shu-Wei Hsu

Hari Chetlur

Gregory Frederick Gibsen

Frankie Thompson

Huiqing Wen

A system and method for encrypting portions of data for storage in a remote network have been provided. The system comprises a memory with instructions executable by a processor to receive data for forwarding to a server device, wherein the received data comprises an indication of one or more portions of the received data to be encrypted; identify a portion comprising the one or more portions of the received data based at least in part on the indication; encrypt the identified portion of the data; generate a payload that comprises the encrypted portion and one or more unencrypted portions of the received data; and transmit, to the server device, the payload.

Edge encryption

A cryptographic key of a first instance of a group of one or more cloud nodes providing a service is managed. A request to share the cryptographic key with a second instance of a different group of one or more cloud nodes is received. A determination is made whether the second instance is allowed to access the cryptographic key. In response to a determination that the second instance is allowed to access the cryptographic key, the cryptographic key is encrypted with a target key of the second instance and the encrypted cryptographic key is signed using a cryptographic signature of the first instance. The signed encrypted cryptographic key is provided to the second instance.

Automatic key exchange

Systems and methods are disclosed for encrypting portions of data for storage and processing in a remote network. For example, methods may include receiving a message that includes data for forwarding to a server device; encrypting a portion of the data to determine an encrypted portion; determining metadata based on the portion of the data, wherein the metadata indicates one or more properties of the portion of the data and enables one or more operations to be performed by the server device that depend on the one or more properties; determining a payload including the data with both the encrypted portion and the metadata substituted for the portion of the data; and transmitting the payload to the server device.

Edge encryption with metadata

Embodiments are disclosed herein that provide users of a cloud computing system with the ability to determine, display, prioritize, and/or handle error messages, e.g., using a system-wide standardized naming format. In some embodiments, the appropriate system-wide standardized error messages may be determined, even in situations where at least some of the data underlying the error is encrypted and remains unknown to the hosted cloud computing system. The system-wide standardized error messages may include, e.g., an indication of a company's name, an application name, as well as a unique error code. The standardized error message may also include information as to how the error may potentially be remediated. Using these embodiments, users may be able to more quickly understand which errors to address first and what possible solutions may be employed in order to resolve those errors&#x2014;while remaining confident that any encrypted information has remained uncompromised.

Growing community of inventors

San Diego, CA, United States of America

Pierre Francois Rohel