Abstract: A system and method that prevents data access and data exfiltration is disclosed. The system includes a communication interface configured to receive and send encrypted and non-encrypted data, a secure storage device that resides on a gateway the storage device stores a plurality of pre-configured encryption policies and a processing circuit coupled to the storage device and the communication interface. The processing circuit configured to identify confidential data elements in a message payload received at the gateway through the communication interface, apply the encryption policies to each identified confidential data element in the message payload, receive a collection of Group Keys from a key store, encrypt each identified confidential data element in the message payload based on the encryption policies and the Group Keys and store the encrypted identified confidential data elements in a remotely located data storage device accessible through the communication interface.

Abstract: A system and method that prevents data access and data exfiltration is disclosed. The system includes a communication interface configured to receive and send encrypted and non-encrypted data, a secure storage device that resides on a gateway the storage device stores a plurality of pre-configured encryption policies and a processing circuit coupled to the storage device and the communication interface. The processing circuit configured to identify confidential data elements in a message payload received at the gateway through the communication interface, apply the encryption policies to each identified confidential data element in the message payload, receive a collection of Group Keys from a key store, encrypt each identified confidential data element in the message payload based on the encryption policies and the Group Keys and store the encrypted identified confidential data elements in a remotely located data storage device accessible through the communication interface.