Client side data encryption/decryption for web application

This paper describes an approach and implementation issues of client-side data encryption for thin client-web browser. Since the service provider may be a competitor of the service user, sensitive parts of data are encrypted and decrypted by the client. Cipher key generation and distribution issues are discussed: although the cipher key is kept in private, the paper shows the way for the key validation by the server side to maintain data consistency.