Cloud Data Protection via Dynamic Communicator Updates

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Cloud computing data is vulnerable to online security threats such as eavesdropping, phishing, and interception due to the need for data transfer over computer networks, which existing technologies have not adequately addressed.

Innovation Solution

A three-layered data protection system is implemented, including regular updates of a communicator's algorithms for processing raw data into secured data, encryption using keys not transmitted to the receiver, and dynamic selection of communication channels, to secure data transfer between client and server computers in a cloud computing environment.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If data is transferred over computer networks for cloud processing, then processing capability and accessibility are improved, but data security and vulnerability to online threats worsen

Engineering Contradiction:
Improveprocessing capabilityVSAvoiddata security
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system performs preliminary actions by updating the communicator algorithm before data transmission occurs. The server sends update instructions to the client's communicator, which then processes raw data into secured data using the updated algorithm before transmission. This preliminary security preparation ensures that even if data is intercepted during transmission, it cannot be read or altered by malware, thus resolving the contradiction between enabling network processing and maintaining data security.

Inventive Principle:
Principle #10Preliminary action

2Ease of operation

If encryption keys are transmitted to the receiver, then data decryption capability is improved, but security vulnerability to interception worsens

Engineering Contradiction:
Improvedata decryption capabilityVSAvoidsecurity vulnerability to interception
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The invention extracts the encryption key from the transmission process. Instead of transmitting the key along with the encrypted data, the system uses a communicator algorithm that generates secured data through a process where the key material is never sent over the network. The server can still decrypt the data by having the same algorithm execute with the appropriate inputs, thus eliminating the vulnerability to key interception while maintaining decryption capability.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If the communicator algorithm is updated regularly, then security against malware is improved, but system complexity and update management worsen

Engineering Contradiction:
Improvesecurity against malwareVSAvoidupdate management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system implements feedback by having the server check whether the client's communicator needs updating before allowing data processing. The server sends update instructions only when necessary, and the client applies updates by receiving and executing instructions from the server. This feedback mechanism ensures security updates are applied consistently without requiring complex autonomous update management on the client side, thus resolving the contradiction between improving malware security and managing system complexity.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS8892867B1Techniques for protecting data in cloud computing environments
Publication Date: 2014.11.18 TREND MICRO INC
  • US8892867B1 patent drawing
  • US8892867B1 patent drawing
  • US8892867B1 patent drawing

AI summary

A client computer runs a communicator employed to connect to a server computer in a cloud. The communicator is updated on a regular basis to update its algorithms for processing raw data into secured data. The server computer receives and validates the secured data, and attempts to update the communicator if the secured data is invalid. The server computer may deem the client computer as being infected when the update is reinitiated a predetermined number of times. The raw data may be restructured, or encrypted using an encryption scheme where the key used for the encryption is not provided to the receiver of the data. The algorithm for data restructuring and encryption may be included in the update to the communicator. Communication between the client computer and the server computer may be on a dynamically selected channel indicated in a previous communication.