Asymmetric Storage Cryptography for Post-Quantum Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer-implemented storage systems face challenges in maintaining data security against evolving malicious techniques, requiring significant resources to keep pace with emerging threats and ensuring secure encryption of large data volumes.
Innovation Solution
Implementing block-level cryptography operations using asymmetric cryptography techniques, including the generation and management of classical and post-quantum cryptographic keys, and the use of ephemeral key pairs to enhance security by eliminating the need for private key storage at the data storage level and leveraging hybrid public-key encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric key encryption is used for data storage, then encryption speed is fast, but security is vulnerable to quantum computing attacks
Solution Approach 1:
The patent segments the encryption system into two distinct parts: asymmetric encryption (for security/key management) and symmetric encryption (for performance/data encryption). This segmentation allows each component to operate in its optimal domain, resolving the contradiction between security and speed.
Solution Approach 2:
The patent introduces asymmetric encryption as an intermediary layer that manages key distribution and exchange, while symmetric encryption handles the actual data encryption. This intermediary approach allows the system to achieve both high security (through asymmetric key management) and high performance (through symmetric data encryption).
2Ease of operation
If private keys are stored at the data storage level, then decryption is convenient, but security is compromised
Solution Approach 1:
The patent extracts the private key storage function from the data storage system and places it in a separate, secure key management system. This extraction eliminates the security vulnerability of storing private keys with data while maintaining decryption convenience through secure key management interfaces.
Solution Approach 2:
The patent introduces a key management service as an intermediary between the data storage system and private keys. This intermediary handles key protection, access control, and decryption operations, allowing convenient decryption while maintaining high security through centralized key management.
3Adaptability or versatility
If classical cryptography algorithms are used, then current security needs are met, but future quantum threats are not addressed
Solution Approach 1:
The patent creates a composite cryptography system that combines classical cryptographic algorithms with post-quantum cryptographic algorithms. This composite approach provides future-proof security against quantum threats while maintaining compatibility with existing systems, managing complexity through a unified interface.
Solution Approach 2:
The patent implements a dynamic cryptography system that can adapt between classical and post-quantum algorithms based on security requirements and threat models. This dynamics allows the system to evolve with emerging threats while maintaining a consistent interface, managing complexity through flexible algorithm selection.
Data Source
AI summary
Techniques and systems can obtain a first private key usable with a classical cryptography algorithm and a second private key usable with a post-quantum cryptography algorithm based on classical and post-quantum public keys hosted by a computer-implemented storage of an online service provider. A plurality of keys to perform a cryptography operation on data hosted by the computer-implemented storage can be generated, the plurality of keys generated based on at least the first and second private keys and a cryptography derivation function identified in the computer-implemented storage. The plurality of keys can be used to perform the cryptography operation on the data hosted by the computer-implemented storage.