Dual Encryption Data Security via Segmented Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing processing capacity of information devices makes low-level use restrictions ineffective against unauthorized data access, and while backup data generation reduces data loss risk, it also increases the risk of data leakage.
Innovation Solution
An information processing system and storage medium that implement a dual encryption mechanism involving two devices and a server, where data is encrypted with separate keys by both users before being stored, and only decrypted with mutual consent, ensuring secure sharing and deletion of data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted with a single encryption key for backup purposes, then data loss risk is reduced, but data leakage risk increases
Solution Approach 1:
The encryption key is segmented into two separate keys held by different users. The original data is encrypted with the first user's key, and the resulting encrypted data is further encrypted with the second user's key. This segmentation ensures that neither user alone can access the original data, preventing data leakage while maintaining backup capability.
Solution Approach 2:
The patent implements nested encryption where the first encrypted data is nested within a second encryption layer. The first encrypted data (already protected by the first key) is further encrypted with the second key, creating a nested structure where multiple encryption layers protect the original data. This nested approach maintains reliability while reducing data leakage risk.
2Ease of operation
If low-level use restrictions are applied to data, then data access control is simplified, but unauthorized access becomes more likely due to increased processing capacity
Solution Approach 1:
Instead of using a single access control mechanism, the patent segments the access control into multiple independent encryption keys held by different users. This segmentation maintains operational simplicity for authorized users while significantly strengthening unauthorized access prevention, as multiple keys are required to access the data.
Solution Approach 2:
The patent creates a composite security mechanism by combining multiple encryption keys and encryption layers. This composite approach integrates different security elements (first encryption key, second encryption key, session management) to form a robust access control system that is both easy to operate for authorized users and highly secure against unauthorized access.
3Reliability
If multiple encrypted data copies are stored in shared storage areas, then data recovery capability is improved, but storage complexity increases
Solution Approach 1:
The patent segments the storage structure into distinct areas: a first storage area for original data, a shared storage area for first encrypted data, and a second storage area for second encrypted data. This segmentation organizes the multiple encrypted copies systematically, improving data recovery capability while managing storage complexity through clear structural separation.
Solution Approach 2:
The patent introduces a server as an intermediary that manages the storage and retrieval of encrypted data across different storage areas. This intermediary handles the complexity of managing multiple encrypted copies, providing a simplified interface for users while maintaining robust data recovery capability through coordinated access to multiple encrypted versions.
Data Source
AI summary
An information processing system includes a first device and a second device. The first device generates first encrypted data by applying a first encryption with respect to the original data stored in a shared storage area, and causing the first encrypted data to be stored in the shared storage area. The second device generates second encrypted data by applying a second encryption with respect to the first encrypted data stored in the shared storage area, and causes the second encrypted data to be stored in the shared storage area. The first device deletes the original data and the first encrypted data from the shared storage area.