Database Encryption Key Protection via Dual Master Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for protecting encryption keys in databases do not adequately ensure dual control and split knowledge, which are critical for securing sensitive data against unauthorized access, particularly in compliance with standards like PCI-DSS.
Innovation Solution
Implementing a system that uses a master key and a dual master key, both requiring dual control and split knowledge for access, where both keys are protected by separate passwords and can be automatically accessed through server-private files, ensuring that two entities must independently supply their passwords to access encrypted data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single master key is used to encrypt encryption keys in the database, then the system is easier to operate and manage, but the security level is insufficient and does not provide dual control or split knowledge protection
Solution Approach 1:
The master key is divided into two separate components: a first master key and a second master key. Each master key is encrypted with a different password and stored separately. Both master keys are required to decrypt and access the encryption keys in the database, implementing dual control and split knowledge protection without requiring a single point of failure.
2Ease of operation
If automated key access is implemented through server-private files, then the ease of operation is improved, but the security risk increases if the files are compromised
Solution Approach 1:
The system performs preliminary actions by automatically reading the first and second master keys from server-private files at startup. This automation eliminates manual key entry while maintaining security through the requirement that both master keys (each protected by different passwords) must be present and correctly configured in the files before the system can operate.
3Reliability
If dual control with two master keys is implemented, then the protection level against unauthorized access is significantly improved, but the system complexity and difficulty of key management increases
Solution Approach 1:
The system uses server-private files as intermediaries to automatically store and retrieve the first and second master keys. This intermediary mechanism simplifies key management by eliminating the need for manual handling of multiple keys while maintaining the security benefits of dual control, as the files automatically provide both keys when needed.
Data Source
Figure 1
Figure 2
Figure 3A
AI summary
System, method, computer program product embodiments and combinations and sub- combinations thereof for protection of encryption keys in a database are described herein. An embodiment includes a master key and a dual master key, both of which are used to encrypt encryption keys in a database. To access encrypted data, the master key and dual master key must be supplied to a database server by two separate entities, thus requiring dual control of the master and dual master keys. Furthermore, passwords for the master and dual master keys must be supplied separately and independently, thus requiring split knowledge to access the master and dual master keys. In another embodiment, a master key and a key encryption key derived from a user password is used for dual control. An embodiment also includes supplying the secrets for the master key and dual master key through server-private files.