Perpetual Data Column Rekeying for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional data management systems face challenges in providing adequate data security, as they often encrypt data only once and do not re-encrypt it regularly, leaving sensitive information vulnerable to fraudsters who can exploit single encryption keys, leading to potential data breaches and compromised user data.
Innovation Solution
Implementing a system that automatically and continuously re-encrypts data columns with different encryption keys on a periodic basis, ensuring that even if a fraudster gains access, they will not have sufficient time to break the encryption before re-encryption occurs, and requiring access to multiple columns to exploit the data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted with a single encryption key, then encryption simplicity is maintained, but security is weakened because fraudsters can break the encryption over time
Solution Approach 1:
The patent divides the database into multiple data columns, each encrypted with a different encryption key. This segmentation ensures that breaking one encryption key does not compromise the entire database, directly resolving the contradiction by maintaining security through distributed encryption rather than single-key encryption.
Solution Approach 2:
The patent implements periodic re-encryption of data columns with new encryption keys at predetermined intervals. This periodic action continuously refreshes the encryption, preventing fraudsters from breaking encryption over extended periods while maintaining manageable complexity through automated scheduling.
2Reliability
If data is re-encrypted manually on occasion, then some security refresh is achieved, but security gaps remain because years may pass between re-encryption events
Solution Approach 1:
The patent implements an automated re-encryption system that operates without manual intervention. The system automatically re-encrypts data columns according to predetermined schedules, eliminating the time delays and human error associated with manual re-encryption processes.
Solution Approach 2:
The patent incorporates monitoring mechanisms that track encryption status and automatically trigger re-encryption when predetermined conditions are met. This feedback loop ensures consistent security maintenance without requiring manual assessment or decision-making.
3Reliability
If an entire database is encrypted with a single encryption key, then encryption management is simplified, but security is compromised because breaking one key exposes the entire database
Solution Approach 1:
The patent segments the database into multiple data columns, each protected by its own encryption key. This segmentation directly addresses the security risk of single-key encryption by ensuring that compromising one key only exposes a portion of the data, not the entire database.
Solution Approach 2:
The patent applies different encryption keys to different data columns based on their specific security requirements. This local quality approach allows tailored security measures for different data types while maintaining overall system security, resolving the contradiction between simplified management and enhanced security.
4Reliability
If data is encrypted only once initially, then processing overhead is minimized, but security is insufficient because the encryption remains static and vulnerable
Solution Approach 1:
The patent implements periodic re-encryption at predetermined intervals rather than continuous re-encryption. This periodic approach maintains security by regularly updating encryption keys while minimizing computational overhead by avoiding constant re-encryption operations.
Solution Approach 2:
The patent changes encryption parameters (keys) periodically rather than continuously. This parameter change strategy maintains security effectiveness while optimizing resource usage by limiting the frequency of computationally intensive encryption operations.
Data Source
AI summary
A data management system stores data related to a plurality of users. The data management system initially stores the data in an encrypted format. The data management system automatically periodically re-encrypts the data in accordance with a re-encryption policy. The re-encryption policy includes re-encryption periodicity data defining a periodicity for automatically re-encrypting the data.