Encrypted Data Translation for Secure Storage Replication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for replicating encrypted storages often use the same encryption scheme across different storage systems, which is risky as it exposes data to corruption or deletion if the private cryptographic key is compromised.
Innovation Solution
Implementing a system that translates encrypted data from one encryption scheme to another during replication, using different public cryptographic keys for source and target storage systems, without decrypting the data, ensuring security through split private keys and a trusted key authority.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the same encryption scheme is used across different storage systems, then data replication is simplified, but data security is compromised
Solution Approach 1:
The patent changes the encryption parameter (public key) between source and target storage systems. The source system uses one public key for encryption while the target system uses a different public key, allowing secure replication without exposing data to the risks of key compromise while maintaining operational simplicity through automated key management.
2Adaptability or versatility
If data is decrypted and re-encrypted during replication, then encryption scheme translation is achieved, but data exposure risk increases
Solution Approach 1:
The patent introduces an intermediary mathematical relationship between different encryption schemes. Instead of decrypting data and then re-encrypting it (which would expose the data), the system uses a trusted key authority and mathematical key relationships to translate encrypted data from one public key to another while keeping the data encrypted throughout the process.
3Reliability
If different public cryptographic keys are used for source and target storage systems, then data security is enhanced, but system complexity increases
Solution Approach 1:
The system implements self-service through automated key management. The trusted key authority automatically generates key pairs, establishes mathematical relationships between keys, and manages the complexity of multiple encryption schemes. This automation eliminates the need for manual key management while maintaining enhanced security through distinct public keys for source and target systems.
Data Source
AI summary
A method and system for securely replicating encrypted deduplicated storages. Specifically, the method and system disclosed herein entail the replication and migration of encrypted data between storage systems that support deduplication. More specifically, a first encrypted data, which may have been encrypted using a first public cryptographic key and consolidated on a source storage system, may be translated into an interim (yet still encrypted) state using a first split private cryptographic key. Thereafter, using a compound conversion key, the interim state data may be further translated into a second encrypted data, which may be characterized as being encrypted by a second public cryptographic key. Therefore, substantively, the method and system disclosed herein may be directed to the translation of encrypted data from one encryption scheme to another while in-flight from a source storage system to a target storage system.