Cryptographic System for Secure Remote Data Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current secure remote storage systems face challenges in ensuring data availability and security, particularly in reconstructing data sets from dispersed shares and maintaining cryptographic key integrity across distributed storage systems.
Innovation Solution
A cryptographic system that employs a trust engine to store and manage cryptographic keys and user authentication data, utilizing data splitting and distribution across multiple secure storage facilities, ensuring that no single facility can recreate the original data without a sufficient number of shares, and implementing a redundancy module for authentication and cryptographic functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is split into multiple shares and distributed across remote storage systems, then data security is improved (no single facility can recreate original data), but data availability deteriorates (difficulty in reconstructing data sets from dispersed shares)
Solution Approach 1:
The patent divides data into multiple shares using secret sharing schemes, distributing them across different remote storage systems. This segmentation ensures that no single storage facility can reconstruct the original data, thereby improving security while maintaining the ability to recover data through combination of sufficient shares.
Solution Approach 2:
The system pre-establishes trust relationships and authentication mechanisms before data is dispersed. Trust engines are configured in advance with appropriate credentials to access and reconstruct data shares, ensuring that data availability is maintained without compromising security during the reconstruction process.
2Reliability
If cryptographic keys are distributed across multiple storage facilities, then security is improved (key integrity is maintained even if some facilities are compromised), but system complexity increases (managing key distribution and reconstruction)
Solution Approach 1:
The patent introduces trust engines as intermediary components that manage cryptographic key distribution and reconstruction. These trust engines act as mediators between storage facilities, handling the complexity of key management while presenting a simplified interface to users and applications.
Solution Approach 2:
The system implements feedback mechanisms where trust engines monitor the status of distributed cryptographic keys and automatically trigger reconstruction processes when needed. This feedback loop simplifies key management by making the system self-regulating rather than requiring manual intervention.
3Speed
If data shares are stored in local memory with backup capability, then data reconstruction speed is improved, but memory requirements increase
Solution Approach 1:
The patent implements local quality by storing different types of data shares in different locations based on their access patterns and reconstruction requirements. Frequently accessed shares are cached in local memory, while less critical shares are stored remotely, optimizing both reconstruction speed and memory utilization.
Data Source
AI summary
Systems and methods are provided for transmitting data to at least one storage system. A request is received to store a data set in a storage location. In response, a first plurality of shares is generated, each containing a distribution of data from the data set, and at least one share is stored in a local memory configured for backup in at least one remote storage system. At least one share is transmitted to the at least one remote storage system. Systems and methods are also provided for improving data availability. In response to a restoration event, if insufficient shares of data are available to reconstruct a data set, a read instruction in a journaling message is transmitted to a remote storage system requesting an additional share. The additional share is received and stored in a local storage, and the data set is reconstructed.