<html><b>Key Manager 1
<html><b>Policy Server 1</b><br>
Never Sees Data.
<html><centre><b>Client</b><br> Only Sees Authorized Data..</centre>
<html><b>Cloud Server</b><br>Never Sees Keys.
(Key Manager 2)
<html>(Policy Server 2) <br>Optional
<html>Cipher text
Key
(Hardware Security Module)
(Hardware Security Module)