Blockchain DID Multi-Cloud Storage With Encrypted File Chunks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud services pose a risk of user data privacy infringement due to central server control, and institutions handling sensitive data face regulatory challenges, limiting their use.
Innovation Solution
A decentralized cloud service using a cloud DID agent that encrypts files, divides them into chunks, and distributes these chunks across multiple external servers, ensuring no single server can access the original file, with recovery possible through erasure coding.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a centralized cloud service is used, then ease of operation is improved, but user data privacy is compromised
Solution Approach 1:
The patent divides user data into multiple chunks and distributes them across different cloud servers. Each server stores only a portion of the data, making it impossible for any single server to access the complete original file, thus protecting user data privacy while maintaining cloud service operation
Solution Approach 2:
The patent introduces a decentralized identifier (DID) agent as an intermediary between users and cloud servers. The DID agent manages encryption keys and coordinates data retrieval without any single entity having access to both the keys and the complete data, enabling secure cloud service operation while protecting user privacy
2Object-affected harmful factors
If data is distributed across multiple servers, then data privacy is improved, but device complexity increases
Solution Approach 1:
The patent implements automated encryption and chunk distribution processes where the DID agent automatically generates encryption keys, divides data into chunks, and distributes them to appropriate servers without requiring manual intervention. This automation reduces the operational complexity despite the distributed architecture
Solution Approach 2:
The DID agent serves multiple functions including key generation, data encryption, chunk distribution, and coordinate retrieval across multiple servers. By consolidating these functions in a single agent, the system manages complexity while achieving distributed data storage and privacy protection
3Reliability
If data is encrypted and divided into chunks, then data security is improved, but productivity decreases
Solution Approach 1:
The patent performs encryption and data division into chunks as preliminary actions during the initial upload phase. By completing these computationally intensive operations before storage, the system ensures data security without significantly impacting subsequent retrieval and usage operations, thus maintaining productivity
Data Source
AI summary
Disclosed is a cloud DID agent including a memory and at least one processor, in which the at least one processor is configured to receive an upload action request for a file from a mobile agent, generate an encryption key corresponding to the file in response to the upload action request and encrypt the file based on the encryption key, generate a plurality of chunks by dividing the encrypted file into a predetermined size, generate a plurality of data blocks corresponding to each of the plurality of chunks, and distribute and transmit the plurality of data blocks to a plurality of external cloud servers so that the plurality of data blocks are distributed and stored in the plurality of external cloud servers. In addition to this, various embodiments grasped through the specification are possible.