Data-at-Rest Encryption with AEAD Moving-Target Key Rotation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data encryption methods are vulnerable to quantum attacks, and there is a need for post-quantum security to protect data-at-rest, especially in scenarios where encrypted data is compromised and decrypted over extended periods.

Innovation Solution

Implementing Authenticated Encryption with Associated Data (AEAD) and a Moving Target Design, utilizing Quantum Random Number Generation (QRNG) for key management, including identity-based access controls, automatic key rotation, and logging for audits, to ensure data integrity and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional data encryption methods are used, then data protection is provided, but vulnerability to quantum attacks increases

Engineering Contradiction:

Improvedata protectionVSAvoidvulnerability to quantum attacks

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent changes the cryptographic parameters by transitioning from classical encryption algorithms to post-quantum encryption algorithms that are resistant to quantum attacks. This involves using quantum random number generation for key creation and implementing encryption schemes that can withstand quantum computational power, thereby maintaining data protection while eliminating vulnerability to quantum attacks.

Inventive Principle:

Principle #35Parameter changes

2Reliability

If encryption keys are used for data protection, then data security is maintained, but key management complexity increases

Engineering Contradiction:

Improvedata securityVSAvoidkey management complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements self-service key management through automatic key rotation mechanisms and quantum random number generation. The system automatically generates, distributes, and rotates encryption keys without requiring manual intervention, thereby maintaining data security while reducing key management complexity through automation.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent performs preliminary key generation and distribution actions before data encryption. By pre-generating encryption keys using quantum random number generation and establishing key management protocols in advance, the system simplifies ongoing key management operations while maintaining robust data security.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If data is encrypted for long-term protection, then future security is ensured, but data access speed decreases

Engineering Contradiction:

Improvefuture securityVSAvoiddata access speed

Core Design Contradiction:

ReliabilityVSSpeed

Solution Approach 1:

The patent implements dynamic key rotation where encryption keys are periodically changed rather than remaining static. This dynamic approach allows the system to maintain strong future security through continuous key updates while optimizing data access speed by using efficient key management protocols that minimize the overhead of key operations during data retrieval.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS12457093B2QSL—data at rest

Publication Date: 2025.10.28 QUSECURE INC

AI summary

A method to allow a client to communicate with a server, specifically to conduct a key management service, in order to obtain encryption/decryption keys for data-at-rest, wherein the method comprises: causing the client to use Authenticated Encryption with Associated Data (AEAD) to encrypt data according to a moving target design and causing the client, at a later time, to use AEAD to check the integrity of the data and decrypt the data according to the moving target design.