Distributed Key Decryption via Intermediary Group Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Distributed computing environments face challenges in protecting data integrity and compliance with regulations like GDPR due to increased latency, bandwidth utilization, and resource consumption from complex encryption/decryption operations across heterogeneous domains, especially in resource-constrained Edge computing environments.
Innovation Solution
Implementing an intermediary-based group key framework that utilizes corollary group keys, distributed caches, and accelerators to facilitate secure data transmission and access, reducing the need for node-to-node attestation and minimizing latency by leveraging network intermediaries for secure data propagation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional centralized key management is used in distributed computing environments, then data security is improved, but latency increases and computational overhead increases
Solution Approach 1:
The patent introduces an intermediary-based group key framework where intermediaries manage encryption keys and facilitate secure data access. This mediator approach allows nodes to access encrypted data without contacting a centralized authority, reducing latency while maintaining security through distributed key management among intermediary nodes
Solution Approach 2:
The system segments the centralized key management function into multiple intermediary nodes distributed throughout the network. Each intermediary manages a portion of the key distribution and access control, enabling parallel processing of authentication requests and reducing the single point of congestion that would cause latency
2Reliability
If extensive key management and authentication across multiple nodes is implemented, then data protection is improved, but computational overhead increases
Solution Approach 1:
The patent employs identity-based public key encryption where a single identifier (such as a DNS name or URL) serves multiple functions: authentication, authorization, and key derivation. This universal approach eliminates the need for complex multi-step authentication protocols and multiple key exchanges, reducing computational overhead while maintaining comprehensive data protection
Solution Approach 2:
The system performs key derivation and encryption operations in advance during data storage, rather than during access. Encryption keys are pre-computed and stored with the data, allowing nodes to directly access encrypted data without performing complex authentication computations at access time, thereby reducing computational overhead during critical operations
3Adaptability or versatility
If secure data access across domains is enabled, then data sharing capability is improved, but bandwidth utilization increases
Solution Approach 1:
The patent implements encrypted data copying where data is replicated in encrypted form at multiple intermediary nodes and edge locations. This allows nodes to access data from the nearest copy without transmitting large datasets across the network, reducing bandwidth utilization while maintaining the ability to share data across multiple domains through the distributed encrypted copies
Data Source
AI summary
Methods, apparatus, systems, and articles of manufacture are disclosed to protect distributed data. An example apparatus includes at least one memory, machine readable instructions, and processor circuitry to at least one of instantiate or execute the machine readable instructions to detect a key identifier combination from a distributed key, identify a match between the key identifier combination and a platform identifier combination, extract a second key from the distributed key, the second key associated with the object, and decrypt the object via the extracted second key.