All products

Office Automation

Partners

Intelligent Management

API Center

Backup

Big Data

General Reference

Concepts

Concepts Description

Key Management Service

KMS is a secure and reliable key management service. You can use KMS for centralized key management to ensure security.

Customer Master Keys

Customer master keys (CMKs) are master keys you create with Ping An Cloud KMS. You can use CMKs to encrypt and protect data, and generate envelops. You can also use CMKs to directly encrypt small amounts of data. CMKs can be either customer managed keys or Ping An Cloud managed keys. You can encrypt multiple data keys with a CMK.

Data Keys

Data keys are encryption keys used to encrypt data. You can generate, encrypt, and decrypt data keys with a CMK. The GenerateDataKey interface generates a symmetric data key, and returns a plaintext copy and a cyphertext copy of the data key (the latter is encrypted under the corresponding CMK). KMS does not store any information of the data key. It only decrypts the ciphertext data key into the corresponding plaintext data key.

Important: After using the plaintext data key to encrypt data, remove it immediately. Store the ciphertext data key only.

Envelope Encryption

Envelope encryption is an encryption method with which you store, transmit, and use data encryption keys in an envelope. In this case, you no longer use CMKs to directly encrypt or decrypt data. In simple terms, envelope encryption refers to the practice where you encrypt data with a data key, and then encrypt the data key under another key.

Did the above content solve your problem? Yes No
Please complete information！
Ok Cancel

Call us

400-151-8800

Email us

cloud@pingan.com

Online customer service

Instant reply

Consult Now

Technical Support

cloud products

Submitted technical jobs