Cloud Data Encryption Key Generation and Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud storage systems lack adequate data security measures, making it difficult for enterprises to securely store, access, and archive data without fear of unauthorized access and manipulation.
Innovation Solution
A system and method for generating and managing cryptography keys to encrypt data before migration to a cloud storage platform, ensuring that only authorized users can access the encrypted data, using a file system manager that operates with encryption modules to migrate and manage encrypted files.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If cloud storage is used to store data, then storage capacity and accessibility are improved, but data security is worsened due to lack of adequate security measures
Solution Approach 1:
The system performs preliminary encryption of data before it is uploaded to cloud storage. The encryption module encrypts files using cryptographic keys generated from user passwords, transforming data into an unreadable format before cloud storage, thereby ensuring security is established in advance rather than relying on cloud provider security measures
Solution Approach 2:
The patent introduces an encryption module as an intermediary component between the user's computing device and the cloud storage system. This module acts as a security mediator that encrypts data locally before transmission, adding a layer of protection that independent of the cloud storage provider's security infrastructure
2Ease of operation
If data is stored unencrypted on portable devices, then accessibility and ease of use are improved, but security against unauthorized access is worsened
Solution Approach 1:
The system changes the state parameter of data from unencrypted to encrypted form. By transforming data into encrypted format with high entropy cryptographic keys, the system maintains accessibility for authorized users (who have the password) while making the data unreadable and unusable to unauthorized users, thus changing the security parameter without sacrificing legitimate accessibility
3Reliability
If encryption is implemented to secure cloud data, then data security is improved, but system complexity is worsened due to key management requirements
Solution Approach 1:
The system implements self-service key management where users generate their own cryptographic keys from their passwords using the encryption module. The system automatically manages the encryption and decryption processes without requiring users to manually handle key storage, distribution, or rotation, thereby reducing the perceived complexity for users while maintaining strong security
Solution Approach 2:
The patent segments the security function into separate modular components: password input, key generation, encryption, and decryption. This modular segmentation allows each component to be independently managed and processed, simplifying the overall key management workflow while maintaining cryptographic security
Data Source
AI summary
In one example, a method includes creating a password having ‘n’ characters that each constitute a byte, placing the characters of the password in a first buffer, generating a random number corresponding to the password, using the random number to map a character in the first buffer to a respective random character present in a second buffer, copying the random character to a third buffer, and removing the mapped character from the first buffer. The mapping, copying, and removing processes are repeated for each character in the first buffer so that the first buffer empties and an ‘xth’ random string of ‘n’ length is generated in the third buffer, the ‘xth’ random string comprising the random characters to which respective characters from the first buffer were mapped. Finally, the ‘xth’ random string is placed in a fourth buffer and constitutes at least a portion of an encryption key.