您可以使用自己的加密金鑰來加密貴機構的資料，而非使用 Google Workspace 提供的加密功能。只要啟用 Google Workspace 用戶端加密 (CSE) 功能，系統會先在用戶端的瀏覽器中處理檔案加密作業，再將檔案儲存在雲端硬碟的雲端儲存空間。這麼一來，Google 伺服器就無法存取您的加密金鑰，也無法解密資料。詳情請參閱「關於用戶端加密」。
這個 API 可讓您透過自訂外部金鑰服務，控管用於保護資料的頂層加密金鑰。使用這個 API 建立外部金鑰服務後，Google Workspace 管理員就能連線至該服務，並為使用者啟用 CSE。
重要術語
以下列出 Google Workspace Client-side Encryption API 中常用的術語：
[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["缺少我需要的資訊","missingTheInformationINeed","thumb-down"],["過於複雜/步驟過多","tooComplicatedTooManySteps","thumb-down"],["過時","outOfDate","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["示例/程式碼問題","samplesCodeIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2024-12-22 (世界標準時間)。"],[[["Google Workspace Client-side Encryption (CSE) allows you to encrypt your organization's data with your own keys, preventing Google servers from accessing or decrypting it."],["This API enables you to manage the encryption keys via an external key service, giving you control over data access."],["CSE encrypts files in the user's browser before they are stored in Google Drive, ensuring only authorized users with access to your external key service can decrypt them."],["When a file is encrypted, Google Workspace generates a Data Encryption Key (DEK), which is then encrypted by your external key service and stored with the encrypted data."],["To get started, you can configure your external key service and learn how to encrypt and decrypt data using the provided guides."]]],["Google Workspace Client-side Encryption (CSE) allows users to encrypt data in their browser before cloud storage. This is achieved by using your own external Key Access Control List Service (KACLS). Google Workspace generates a Data Encryption Key (DEK) and sends it to your KACLS for encryption with a Key Encryption Key (KEK). Your service then returns the encrypted DEK to Google Workspace. This ensures that only users with KACLS access can decrypt the stored data.\n"]]
