Crypto Container for Secure PIM Data Synchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data synchronization systems between wireless devices and servers do not adequately protect personal information manager (PIM) data during synchronization, as the data remains accessible and unprotected during the synchronization process.
Innovation Solution
A system comprising a PIM application, a PIM database, a crypto container for encrypting data, and a synchronizer that manages security states to ensure data protection, using cryptographic methods to control access and synchronize encrypted data between the device and server, with implementations like SureWave Mobile Defense and SureWave Manager for secure data handling.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data synchronization is performed with the PIM database accessible during the process, then synchronization speed and ease of operation are improved, but data security and protection are worsened
Solution Approach 1:
The PIM database is divided into two separate copies: a protected copy that remains encrypted and accessible only to the synchronizer, and a working copy that is decrypted and accessible to the PIM application. This segmentation allows the synchronizer to access the protected copy for synchronization while the PIM application accesses the working copy, thereby maintaining data security during synchronization operations.
Solution Approach 2:
A crypto container is introduced as an intermediary layer between the PIM database and the synchronizer. The crypto container encrypts the PIM database and provides controlled access through cryptographic mechanisms. The synchronizer interacts with the crypto container rather than directly with the PIM database, ensuring that data remains protected even during synchronization operations.
2Object-affected harmful factors
If the PIM database is encrypted to protect data, then data security is improved, but access speed and synchronization efficiency are worsened
Solution Approach 1:
The PIM database is pre-encrypted using cryptographic algorithms before synchronization operations begin. This preliminary encryption action ensures that data is protected from the outset, and the encryption structure is designed to allow efficient access patterns that minimize the performance impact during subsequent synchronization operations.
Solution Approach 2:
The system dynamically manages the encryption state of the PIM database by creating a decrypted working copy when needed for PIM application access. The crypto container can transition between encrypted and decrypted states based on operational requirements, allowing the system to optimize between security and access speed depending on the current task.
Data Source
AI summary
A system is disclosed. The system includes a server, a client application, and a first database. The first database is associated with the client application. The system further includes a second database to store data in an encrypted format, and a replicator to synchronize the data stored in the first and second databases. The system also includes a synchronizer to synchronize the data stored in the second database and the server based on a current security level.