Blockchain Data Access Removal via Remote Key Deletion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Blockchain systems do not provide a mechanism for effectively removing data access as required by privacy laws or court orders, as they are designed to be immutable, making it difficult to delete personal information within specified time frames or in response to legal mandates.
Innovation Solution
Implementing a remote key server that encrypts and decrypts data stored in the blockchain, allowing access to be removed by deleting the encryption key, thereby rendering the data inaccessible, and using composite keys for granular control over access removal based on time, region, or category.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in a blockchain, then data integrity and security are improved, but the ability to remove data access is worsened
Solution Approach 1:
The system segments data access control by separating the encryption keys from the blockchain data storage. The key server holds and manages encryption keys independently, while the blockchain stores only encrypted data. This segmentation allows the key server to control access by deleting keys without affecting the immutable blockchain structure, thus resolving the contradiction between maintaining data integrity and enabling access removal.
2Reliability
If blockchain immutability is maintained, then security against tampering is improved, but compliance with privacy laws is worsened
Solution Approach 1:
The key server acts as an intermediary between the blockchain system and data access requests. It controls whether encrypted data on the blockchain can be decrypted by managing the encryption keys. When privacy law compliance is required, the key server deletes the keys, making the data permanently inaccessible even though it remains on the immutable blockchain. This intermediary mechanism allows the system to maintain both tampering resistance and privacy law compliance.
3Adaptability or versatility
If data is encrypted with remote keys, then access control flexibility is improved, but system complexity is worsened
Solution Approach 1:
The system extracts the key management functionality from the blockchain infrastructure and places it in a separate, remotely accessible key server. This extraction allows the blockchain to maintain its simple, immutable structure while the key server handles the complexity of key generation, storage, and deletion. The separation enables flexible access control without increasing the complexity of the blockchain system itself.
Data Source
AI summary
Access to blockchain data may be removed by deleting an encryption key held in a remote server. Incoming data is stored in the blockchain after being encrypted at the key server. An ordinary blockchain user gains access to the data, after forwarding the encrypted data to the remote key server for decryption. Upon receipt of an input (e.g., time stamp), the key server deletes the key. Thereafter, the encrypted data on the blockchain is rendered inaccessible to the ordinary blockchain data user. At no point, does the ordinary data user have access to the key stored in the remote server. Embodiments may find particular use in removing access to personal data stored in a blockchain following the elapse of a predetermined amount of time, as may be required by privacy laws. Granular control over data access can may be afforded through the use of composite keys and/or key hierarchies.