Dual-Layer Encryption for Secure User Information Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information sharing technologies fail to securely control the sharing and propagation of private user information, as recipients can potentially access plain text data and users face burdensome updates when modifying shared information.
Innovation Solution
A method and apparatus that encrypt user information using a first server key unavailable to the recipient, and further encrypting it with a second user-specific key, ensuring secure sharing while allowing the server to manage updates and control information propagation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If user information is shared in plain text format, then information accessibility and ease of use are improved, but information security and privacy protection deteriorate
Solution Approach 1:
The patent creates encrypted copies of user information that can be shared without exposing the original plain text data. The server generates encrypted versions of user information using recipient-specific encryption keys, allowing safe sharing while maintaining security. This resolves the contradiction by providing accessible information copies that do not compromise the original security.
Solution Approach 2:
The patent transforms the state of information from plain text to encrypted format through parameter changes in the data representation. By applying encryption algorithms and transforming data into unreadable formats for unauthorized users, the system maintains accessibility for authorized recipients while protecting against security threats.
2Object-affected harmful factors
If user information is encrypted for security, then information security is improved, but information accessibility and usability deteriorate
Solution Approach 1:
The patent introduces an intermediary decryption mechanism where the server acts as a mediator between encrypted information and authorized recipients. The server stores decryption keys and can decrypt information for authorized users when needed, maintaining security while ensuring accessibility for legitimate users who require the information.
3Object-affected harmful factors
If traditional encryption methods are used, then some security is provided, but control over information propagation and updates is lost
Solution Approach 1:
The patent implements dynamic key management where encryption keys can be updated, revoked, or modified by the server at any time. This dynamic approach allows the server to maintain control over information propagation by adjusting access permissions without requiring changes to the underlying encrypted data, resolving the contradiction between security and control.
Solution Approach 2:
The patent establishes a feedback mechanism where the server monitors and controls information access and propagation. The server can track who accesses encrypted information and can revoke or modify access permissions based on observed usage patterns, maintaining both security and control over information lifecycle.
Data Source
AI summary
A request for sharing information of a first user to a second user is received. Responsive to the request, information of the first user is obtained. The information is encrypted using a first server key to generate first encrypted information, the first server key being unavailable to the second user. The first encrypted information is encrypted using a second user key specific to the second user to generate second encrypted information for sharing with the second user.