Client Account Data Encryption for Secure Remote Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing methods for storing client account data are vulnerable to data leakage during transmission, posing a risk to user security.
Innovation Solution
A data processing method that involves acquiring client account data, encrypting it with a storage key, and storing the encrypted data, followed by restoring and outputting it securely in a client interface.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If client account data is transmitted in plaintext to a remote server for storage, then data storage functionality is achieved, but data leakage risk increases during transmission
Solution Approach 1:
The patent applies preliminary action by encrypting the client account data before transmission to the remote server. The encryption operation is performed in advance during the data upload process, ensuring that only ciphertext is transmitted over the network. This preliminary encryption action eliminates the security risk of plaintext transmission while maintaining the data storage functionality.
2Reliability
If data is encrypted before storage, then data security is improved, but data processing complexity increases
Solution Approach 1:
The patent implements self-service by having the client device perform the encryption operation itself using locally stored key material, rather than relying on the server for encryption services. The client uses its own private key to encrypt data before upload, making the system self-sufficient for security operations and reducing the server's processing burden.
Solution Approach 2:
The patent extracts the encryption function from the server-side processing and moves it to the client-side. By separating the encryption operation from the storage operation, the system reduces server complexity while maintaining security. The server only needs to handle ciphertext storage and basic retrieval, not cryptographic operations.
3Reliability
If encrypted data is stored and transmitted, then data transmission security is improved, but data retrieval and processing time increases due to decryption requirements
Solution Approach 1:
The patent extracts the decryption operation from the server-side processing and performs it locally on the client device. By separating decryption from server operations, the system minimizes network round-trips and reduces overall retrieval time. The server quickly returns ciphertext, and local decryption occurs in parallel with other client operations.
Solution Approach 2:
The patent maintains local copies of key material on the client device, eliminating the need to retrieve keys from the server during decryption operations. This local copying of cryptographic material significantly reduces retrieval time compared to systems that require key fetches from remote servers.
Data Source
AI summary
Embodiments of this application disclose a data processing method performed by an electronic device. The method includes: acquiring client account data of a target client in an account data storage client and acquiring a storage key corresponding to the client account data, the target client being a user-authorized client; encrypting the client account data based on the storage key to obtain encrypted client account data; storing the encrypted client account data and transmitting the encrypted client account data to a storage server, wherein the storage server stores the encrypted client account data; and restoring the client account data based on the stored encrypted client account data and outputting the client account data in a client interface of the account data storage client in response to an output instruction, the output instruction being an output instruction for the client account data acquired in the account data storage client.