Anonymous Data Storage with Segmented Encryption Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face challenges in securely and anonymously storing and accessing sensitive data, such as login credentials and credit card information, due to the insecurity of local storage methods and the risks associated with central server storage, including data loss, synchronization issues, and privacy concerns.
Innovation Solution
The system employs 'blobs' (encrypted data) and 'guards' stored on different machines, using anonymous identities and indirect encryption to secure data access, with human interactive proofs to prevent automated attacks, and enables secure synchronization and recovery across multiple machines.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored on a central server in plain text or with co-located encryption keys, then data accessibility and synchronization are improved, but security and privacy are compromised
Solution Approach 1:
The system segments the encryption key from the encrypted data blob, storing them in separate locations. The data blob is stored on the server while the encryption key remains on the client device, preventing a single point of failure and reducing security risks associated with centralized storage
Solution Approach 2:
The system introduces an intermediary verification mechanism where the server validates client-provided encryption keys without storing them. This intermediary role allows the server to facilitate data access while maintaining security by never having direct access to the encryption keys
2Object-affected harmful factors
If data is stored locally on a single computer, then security is improved through encryption, but portability and accessibility across multiple devices are reduced
Solution Approach 1:
The system adds a new dimension to data storage by separating the data blob (stored on server) from the encryption key (stored on client). This dimensional separation allows data to be accessed from multiple devices while maintaining security, as each device can store the same encryption key and retrieve the data blob from the server
3Adaptability or versatility
If data is stored on portable storage devices, then portability is improved, but security against loss or damage and accessibility without the device are reduced
Solution Approach 1:
The system merges the benefits of local encryption (security) with cloud storage (portability and reliability). The encrypted data blob is uploaded to a server for safekeeping and accessibility, while the encryption key remains on the client device, combining the advantages of both local and remote storage
4Ease of operation
If users store sensitive data in plain text documents, then ease of access is improved, but security is severely compromised
Solution Approach 1:
The system performs preliminary encryption of data before storage, transforming plain text into encrypted form. This preliminary action ensures that even if the stored data is accessed by unauthorized parties, the information remains protected until the proper decryption key is provided
Data Source
AI summary
The subject disclosure pertains to secure and anonymous data storage and access. More particularly, encryption methods and mechanisms are provided in conjunction with one or more blobs, identities, and guards to implement one or more layers of indirect encryption. Generation of these components can be accomplished without including or pointing to any personally identifiable information about a user. Accordingly, a user can store sensitive data securely and anonymously on a server or like storage system. Such data can also be roamed, recovered, and synchronized securely from a plurality of computers at least because the data is centrally located.