Digital Identity Key Management for Encrypted Cloud Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The lack of encryption and identity management in IoT systems leads to security vulnerabilities and misappropriation of data in cloud databases, necessitating enhanced security and identification methods.
Innovation Solution
A digital identity system is implemented using block chain technology to generate user and asset identities, encrypt data, and manage access through user and data keys, ensuring secure data storage and access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored in cloud database without encryption, then data accessibility and operation ease are improved, but data security and reliability deteriorate
Solution Approach 1:
Data is encrypted before being uploaded to the cloud database. The encryption operation is performed in advance on the user's device, so that when data is stored and accessed from the cloud, it remains encrypted throughout the process. This preliminary encryption action ensures data security while maintaining ease of access, as the encrypted data can still be retrieved and decrypted when needed.
Solution Approach 2:
An encryption key management system acts as an intermediary between the user and the cloud database. The system uses public-key cryptography where public keys encrypt data before cloud storage, and private keys decrypt data when accessed. This intermediary encryption layer protects data security while allowing seamless access operations.
2Reliability
If digital identity and encryption systems are implemented, then data security and reliability are improved, but system complexity and device complexity increase
Solution Approach 1:
The system automatically generates and manages encryption keys without requiring manual user configuration. Digital identities are automatically created with associated public and private keys. The encryption and decryption processes are handled automatically by the system, reducing the complexity burden on users while maintaining high security standards.
Solution Approach 2:
The digital identity system serves multiple functions simultaneously: it provides user authentication, data encryption, access control, and security management. By consolidating these functions into a single universal system, the patent reduces overall complexity compared to having separate systems for each function.
Data Source
AI summary
A method for managing a digital identity system includes generating a user digital identity for a user, generating an asset digital identity for an asset, generating a user public key and a user private key after the user digital identity is generated, generating descriptive data related to the asset, generating a data public key and a data private key after the descriptive data is generated, encrypting the data with the data public key to generate encrypted data, saving the data private key on a user end, uploading the encrypted data to a cloud database, a platform reading the encrypted data from the cloud database, a data requester querying and requesting for data, forwarding a data request to a data owner in an qualified data owner set and granting a data access to the data request if the data owner accepts the data request.