System and method for data access management using destination-based encryption

Abstract

Methods and systems for managing access to data stored in data storage systems are disclosed. An end device (e.g., a data processing system) and/or user thereof may require access to sensitive data stored in a data storage system. To prevent malicious parties from gaining access to the sensitive data, an access control system may be implemented. The access control system may include a registration process that registers end device and user combinations and assigns cryptographic key pairs to each registered combination. Before sensitive data may be accessed, a requesting device and its associated user may be validated (e.g., authenticated) using the key pairs generated during registration. The sensitive data may be encrypted pre-transit using device-specific encryption (e.g., using the key pair assigned to the end device during registration) as an additional access control measure to prevent malicious parties gaining access to the sensitive data.