Crypto Proxy Automating Cloud Storage Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face cumbersome processes when accessing and sharing cloud-stored data due to the need for manual encryption and decryption, and cloud storage providers cannot offer value-added services without access to unencrypted data.
Innovation Solution
A crypto proxy is deployed within a private network to automatically encrypt files for upload and decrypt files upon request, enabling secure data exchange while providing services like thumbnail generation, indexing, and public link sharing without revealing encryption keys to the cloud storage server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users manually encrypt files prior to upload and decrypt files after download to maintain complete data privacy, then data security is improved, but user access convenience deteriorates
Solution Approach 1:
The patent introduces a crypto proxy as an intermediary component between the user and the cloud storage server. This proxy automatically handles encryption of files before upload and decryption after download, eliminating the need for users to manually perform cryptographic operations. The proxy maintains complete data privacy by ensuring the cloud storage server never receives unencrypted data or encryption keys, while simultaneously improving user access convenience by automating the encryption/decryption process transparently.
2Reliability
If users manually encrypt and decrypt files to maintain complete data privacy, then data security is improved, but time consumption increases
Solution Approach 1:
The crypto proxy is configured to automatically perform encryption and decryption operations without requiring user intervention. When a user uploads a file, the proxy automatically encrypts it; when a user downloads a file, the proxy automatically decrypts it. This self-service automation eliminates the time users would otherwise spend manually performing cryptographic operations, while maintaining the same security guarantees.
3Reliability
If the cloud storage server only stores encrypted data, then data privacy is improved, but value-added services capability deteriorates
Solution Approach 1:
The patent segments the system into two distinct functional components: the crypto proxy that handles all encryption/decryption operations and maintains data privacy, and the cloud storage server that stores only encrypted data but can still provide value-added services. The proxy processes files locally to generate thumbnails, perform text indexing, and create public links before files are uploaded to the server. This segmentation allows the server to offer versatile services without compromising data privacy.
Data Source
AI summary
In one embodiment, a proxy receives, from a client node, a file to be stored by a cloud storage server, where the proxy and the client node are part of a private network that does not include the cloud storage server. The proxy retrieves an encryption key associated with a user of the client node and encrypts the file using the encryption key. The proxy then transmits the encrypted file to the cloud storage server.