Asymmetric Key Management for Encrypted Collaboration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing online collaboration systems face challenges in securely sharing and accessing encrypted data among multiple users, as traditional cryptographic systems are cumbersome when multiple users need to access and view encrypted data, requiring distribution of encryption and decryption keys.
Innovation Solution
A method and system that uses asymmetric key pairs for secure data sharing, where each user has a unique key pair, and the server manages access by decrypting and re-encrypting data with additional user keys, allowing multiple authorized users to access encrypted data content without distributing keys directly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional cryptographic systems are used to encrypt data before storage, then data security is improved, but key distribution becomes cumbersome and complex when multiple users need to access the data
Solution Approach 1:
The patent introduces a cryptographic intermediary component that manages key distribution and access control. This intermediary handles the complex task of generating, distributing, and managing encryption keys among multiple users, thereby maintaining data security while eliminating the burden of manual key distribution. The intermediary acts as a trusted third party that coordinates access without requiring direct key sharing between users.
Solution Approach 2:
The system implements self-service cryptographic operations where users can independently manage their own access rights and keys through automated processes. The cryptographic system automatically handles key generation, distribution, and revocation without requiring manual intervention, allowing users to service themselves while maintaining security protocols.
2Ease of operation
If encryption keys are distributed to all authorized users, then data accessibility is improved, but security risk increases due to more key distribution points
Solution Approach 1:
The patent segments the cryptographic key management into distinct components and roles. Instead of distributing complete keys to all users, the system divides key management functions among multiple parties, with each user receiving only the specific key fragments or access rights they need. This segmentation reduces the security risk associated with widespread key distribution while maintaining data accessibility.
Solution Approach 2:
The system employs asymmetric cryptography where different users have different types of keys and access rights. Rather than symmetric key distribution where all users have equal access, the asymmetric approach allows the system to grant different levels of access to different users, reducing security risks while maintaining ease of access for authorized operations.
3Measurement precision
If manual key management is used for each user, then access control precision is improved, but system complexity and time consumption increase
Solution Approach 1:
The cryptographic system implements automated self-service mechanisms that handle key generation, distribution, and management without manual intervention. The system automatically assigns appropriate access rights and manages key lifecycles based on predefined policies, maintaining precise access control while eliminating the time-consuming manual key management processes.
Solution Approach 2:
The system incorporates feedback mechanisms that automatically adjust key management based on access patterns and security requirements. The cryptographic system monitors and responds to access requests in real-time, dynamically managing keys and access rights without requiring manual configuration, thereby maintaining precision while reducing time consumption.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of sharing collaborative data between registered users in an online collaboration system. The collaboration system has a server and one or more electronic user devices that are capable of data communication with the server over a data network. Each registered user is allocated a unique asymmetric key pair comprising a user public key and a user private key for encryption and decryption of shared data content. The server is able to modify uploaded encrypted data content to enable access by multiple authorised users, and is able to convert uploaded data content into alternative formats, typically to enable web-browser viewing.