Encrypted Data Transmission in Multitenant Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional onion routing techniques fail to securely convey electronic data from a device outside a multitenant system to a tenant device within the system, as they decrypt the data at the multitenant level instead of the intended recipient device, compromising security and control.
Innovation Solution
The method involves encrypting electronic data with keys controlled by the recipient device or multitenant system, creating multiple encrypted files with identifiers for intermediate devices and the recipient device, and decrypting these files in a manner that ensures the final encrypted data is delivered securely to the tenant device, using a combination of intermediate devices and key management within the multitenant system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional onion routing techniques are used to convey electronic data, then the data can be transmitted through intermediate devices, but the data is decrypted at the multitenant level instead of the recipient device, compromising security
Solution Approach 1:
The patent segments the decryption process by creating separate encrypted files for different decryption levels. The first encrypted file contains data encrypted with the recipient device's public key, while the second encrypted file contains data encrypted with the multitenant system's public key. This segmentation ensures that each decryption level only accesses the encryption keys it needs, preventing premature decryption at the multitenant level and maintaining security until the data reaches the intended recipient device.
Solution Approach 2:
The patent applies preliminary action by pre-encrypting the electronic data with the recipient device's public key before transmission through the multitenant system. This preliminary encryption ensures that even if the multitenant system or intermediate devices access the data, they cannot decrypt it without the recipient device's private key. The encryption is performed in advance with the specific recipient in mind, not as a generic multitenant encryption.
2Reliability
If encryption is applied to electronic data for secure transmission, then security is improved, but the complexity of key management and file creation increases
Solution Approach 1:
The patent uses public key cryptography as an intermediary mechanism that simplifies key management. Instead of requiring secure exchange of secret keys between the sender and recipient, the system uses the recipient device's public key (which can be freely distributed) for encryption. The multitenant system's public key serves as another intermediary layer for protecting data during transmission through the multitenant infrastructure. This intermediary approach maintains confidentiality while reducing the complexity of key distribution and management.
Data Source
AI summary
Electronic data can be transmitted from a device outside a multitenant system to a recipient device that is a tenant device associated with the multitenant system. A processor of the device outside the multitenant system can encrypt the electronic data to produce a first file. The processor can produce a second file. The second file can include the first file and an identification. The identification can be for the recipient device. The processor can encrypt the second file to produce a third file. The processor can transmit, to the multitenant system, a file for transmission. The file for transmission can include the third file. The multitenant system can be configured to communicate with the recipient device.