Secure Cloud Session Recovery via Local Encrypted Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud service providers face challenges in maintaining secure client-cloud connections and preserving session-specific data when connections are terminated due to idle periods or other termination conditions, leading to potential unauthorized access and strain on cloud storage resources.
Innovation Solution
The method involves transmitting encryption keys between a cloud-based server and client device, encrypting session-specific data on both ends when a termination condition is met, and allowing for secure recovery of terminated sessions by exchanging decryption keys upon re-initiation, ensuring data security and reducing storage burdens.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cloud service providers implement security rules that cause processing sessions to time-out and disconnect when client devices become non-responsive or idle, then unauthorized access to sensitive user data is reduced, but session-specific data is lost and cloud storage resources are strained
Solution Approach 1:
The system performs preliminary encryption of session-specific data on the client device before session termination occurs. The encryption key is transmitted to the cloud-based server in advance, and the data is encrypted during the active session, so that when the session terminates due to timeout or other conditions, the data is already secured and can be recovered without loss.
Solution Approach 2:
The invention extracts the session-specific data from the cloud storage system and stores it locally on the client device in encrypted form. This removes the burden of storing active session data in the cloud while maintaining security, allowing the data to be recovered locally after session termination without straining cloud storage resources.
2Reliability
If cloud service providers implement security rules that cause processing sessions to time-out and disconnect when client devices become non-responsive or idle, then unauthorized access to sensitive user data is reduced, but cloud storage resources are strained
Solution Approach 1:
The system extracts session-specific data from cloud storage and stores it locally on the client device in encrypted form. This eliminates the need to maintain cloud storage resources for active session data, reducing storage strain while maintaining security through encryption.
Solution Approach 2:
The client device performs self-service by encrypting and storing its own session-specific data locally using the transmitted encryption key. This eliminates the need for cloud-based storage management of session data, allowing cloud resources to be freed for other purposes while maintaining data availability through local storage.
3Reliability
If session-specific data is encrypted on the client device using the cloud-based server's encryption key when termination conditions are satisfied, then data security is maintained during recovery, but additional computational operations are required
Solution Approach 1:
The encryption of session-specific data is performed in advance during the active session rather than at the moment of termination. The client device receives the encryption key, encrypts the data, and stores it locally before session end, so that when termination occurs, the data is already secured without requiring complex real-time encryption operations during recovery.
Data Source
AI summary
A method enabling recovery of a terminated client-to-cloud processing sessions includes writing at least some data of cloud-based processing session between a cloud based server and a client device to the client device. Responsive to satisfaction of a session termination condition, the stored data is encrypted such that it can be recovered using suitable decryption techniques when the client-to-cloud-connection is subsequently re-established.