Thales Expands Relationship with Google Cloud to Increase Customer Trust in the Cloud

Rhea-AI Summary

The collaboration between Thales and Google Cloud enhances data security for organizations migrating workloads to the cloud. Their integrated solution, Ubiquitous Data Encryption, combines Google Cloud’s Confidential Computing with Thales’s CipherTrust Cloud Key Manager, allowing users to manage encryption keys securely. With over half of organizations shifting to the public cloud, safeguarding sensitive data is crucial. This solution ensures that data remains private during processing, significantly increasing user control and trust in cloud services.

Positive

• Collaboration enhances data security for cloud migrations.
• Ubiquitous Data Encryption provides complete control over sensitive data.
• Integrates Google Cloud's Confidential Computing with Thales's CipherTrust solutions.

Negative

• None.

• Broader relationship provides organisations with clear path to confidently use highly-sensitive data in Google Cloud Platform (GCP)
• Enables Ubiquitous Data Encryption, a solution that combines Google Cloud’s Confidential Computing with Thales’s CipherTrust Cloud Key Manager
• Thales CipherTrust Data Security Platform allows users to create and manage encryption keys for data moving to Google Cloud’s Confidential Computing

PARIS LA DÉFENSE--(BUSINESS WIRE)-- Building on the two companies’ long standing partnership, Thales and Google Cloud are now working together to strengthen data security for customers migrating their workloads to the cloud. The Thales and Google Cloud solution enables Ubiquitous Data Encryption, a unified offering that provides complete control over data at-rest, in-use, and in-transit with comprehensive centralized key control owned and managed by the customer. It leverages the combined power of Google Cloud’s Confidential Computing, a breakthrough technology that encrypts data in-use while it is being processed, and Thales’s CipherTrust Cloud Key Manager, to create and manage their encryption keys in Google Cloud.

©Thales

Increasing trust in the cloud

According to the 2021 Thales Data Threat Report, more than half (51%) of all organisations surveyed are shifting their workloads and data to the public cloud, making data security and control even more important. The integrated Thales and Google Cloud solution ensures that data at-rest, in-transit and now data in-use cannot be accessed via the cloud service provider, offering confidentiality of the customer’s data.

As a result of Google Cloud’s Ubiquitous Data Encryption, organisations now have a way for highly-sensitive data to be used in GCP. This is achieved by only granting access to data usage via a confidential Virtual Machine (VM) with encryption keys hosted outside of GCP, and key management handled via an external cloud key manager, like CipherTrust.

“To facilitate the future of secure data transfer, we must be able to put control entirely in the hands of the customer. Google Cloud’s Ubiquitous Data Encryption allows the end user to reduce the amount of implicit trust involved in data storage and transfer. By bringing in a trusted third-party platform like Thales’s CipherTrust Data Security Platform, we can provide our customers with the data security solution they need to seamlessly encrypt and decrypt their sensitive and proprietary information,” said Nelly Porter, Group Project Manager, Cloud Security at Google.

Ensuring strong key management

The integrated solution leverages Thales’s CipherTrust Cloud Key Manager to allow users to create encryption keys and establish rules for wrapping and unwrapping each key, providing support for several specific confidential computing use cases.

“Since 2017, we have been working together with Google Cloud to make it possible for enterprises to put their trust in the cloud with more sovereign control over their data security. Recently, we have announced in France the co-development a trusted cloud that will also rely on our CipherTrust solutions. Our support of Google Cloud’s Ubiquitous Data Encryption is another indication of our shared vision to deliver organisations around the globe with solutions that allow them to securely control and manage their data no matter where it resides,” said Todd Moore, VP Encryption Products at Thales.

Increasing customer control

Thales’s CipherTrust Data Security Platform allows the end user to maintain strong ownership of their data on-premises and in the cloud, as well as when moving sensitive workflows and data to the cloud. The new, integrated solution for GCP represents a new use case for Hold Your Own Key (HYOK), stemming from Thales’s extensive experience building HYOK solutions for customers migrating their workloads to the public cloud.

Google Cloud customers using the Confidential VMs powered by AMD EPYC™ processors can encrypt data in use using the advanced security feature, Secure Encrypted Virtualization, which is available on AMD EPYC™ CPUs. With confidential computing, customers can be confident that their data will stay private and encrypted even while being processed.

“Confidential Computing addresses key security concerns many organizations have today in migrating their sensitive applications to public cloud. Google Confidential VMs, powered by AMD EPYC processors and using its Secure Encrypted Virtualization (SEV) feature, enables protection that’s transparent from applications, helping customers safeguard their most valuable information while in-use by applications in the public cloud,” added Raghu Nambiar, corporate vice president, Data Center Ecosystems and Solutions, AMD.

Additional information

• Thales Security Sessions Podcast - Evolution of cloud security: From shared responsibility to share fate with Sebastien Cano and Sunil Potti
• Trust Paradox: Trust Google Cloud more by removing implicit trust with ubiquitous data encryption blog by Anton Chuvakin and Il-Sung Lee, Google Cloud
• Thales CipherTrust Data Security Platform now allows users to create and manage encryption keys for data moving to Google Cloud’s confidential computing blog by Leonor Martins, Thales
• 5 Cheat sheets to help you get started on your Google Cloud journey

About Thales

Thales (Euronext Paris: HO) is a global leader in advanced technologies, investing in digital and “deep tech” innovations – connectivity, big data, artificial intelligence, cybersecurity and quantum computing – to build a confident future crucial for the development of our societies. The Group provides its customers – businesses, organisations and governments – in the defense, aeronautics, space, transport, and digital identity and security domains with solutions, services and products that help them fulfil their critical role, consideration for the individual being the driving force behind all decisions.

Thales has 81,000 employees in 68 countries. In 2020 the Group generated sales of €17 billion.

PLEASE VISIT

Thales Group
Security

View source version on businesswire.com: https://www.businesswire.com/news/home/20220215005083/en/

PRESS CONTACT

Thales, Media Relations

Security

Vanessa Viala

+33 (0)4 42 36 58 63

vanessa.viala@thalesgroup.com

Source: Thales

FAQ

What is Ubiquitous Data Encryption in relation to THLLY?

Ubiquitous Data Encryption is a solution by Thales and Google Cloud that ensures complete control over sensitive data during cloud processing.

How does the collaboration between Thales and Google Cloud affect THLLY's customers?

The collaboration enhances data security for customers migrating workloads to Google Cloud, providing solutions for managing sensitive data.

When was the Ubiquitous Data Encryption announced for THLLY?

The announcement regarding Ubiquitous Data Encryption was made recently, focusing on improving cloud data security.

What technology underpins the Ubiquitous Data Encryption solution for THLLY?

The solution combines Google Cloud's Confidential Computing with Thales’s CipherTrust Cloud Key Manager.

What are the benefits of Ubiquitous Data Encryption for THLLY's clients?

It allows clients to maintain strong ownership of their data, ensuring confidentiality and control over data use in GCP.