Distributed Key Encryption System with Aggregation Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file encryption systems fail to balance security and flexibility, as they either allow unauthorized access or overly restrict data movement, and lack effective methods for secure data transfer across networks.
Innovation Solution
A distributed key encryption system where encryption keys are generated using high entropy methods and stored redundantly across network devices, with a key aggregation server coordinating key distribution and retrieval, using hash functions to ensure secure and flexible access while preventing unauthorized key reconstruction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If encryption keys are stored in a centralized location, then key management is simplified, but the system becomes a single point of failure and security risk
Solution Approach 1:
The encryption key is divided into multiple key fragments that are distributed across different network devices. No single device holds the complete key, eliminating the single point of failure while maintaining key management capabilities through the aggregation server that coordinates fragment collection.
2Reliability
If encryption keys are distributed across multiple devices, then system reliability improves, but key management complexity increases
Solution Approach 1:
A key aggregation server acts as an intermediary between clients and the distributed key fragments. The server handles the complexity of locating, retrieving, and assembling key fragments from multiple network devices, presenting a simplified interface to clients while maintaining high system reliability through distribution.
3Object-affected harmful factors
If sensitive data is bound to one computer, then unauthorized access is prevented, but data movement flexibility is lost
Solution Approach 1:
The encryption key is segmented into fragments distributed across the network, allowing the encrypted data to be securely transferred between computers. As long as the key fragments remain protected in the network, the data can be moved flexibly while maintaining security, resolving the contradiction between access control and data mobility.
4Object-affected harmful factors
If key fragments are stored in network devices, then security is improved through distribution, but key retrieval complexity increases
Solution Approach 1:
The key aggregation server serves as a mediator that manages the complexity of retrieving key fragments from distributed network devices. It handles the coordination, authentication, and assembly of fragments, presenting a simple retrieval interface to clients while maintaining strong security through distributed storage.
Data Source
AI summary
Embodiments of methods and network devices for securing data within a network are generally described herein. One such method includes a key aggregation server receiving a request for an encryption key to secure the data. The server may query a plurality of network devices for a respective key from each queried network device. The server may then receive the respective key from each of the plurality of network devices and select a key element from each of the plurality of keys. An encryption key may be constructed from the key elements and transmitted to a client.