Encrypted Data Storage Segmentation and Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for storing and retrieving encrypted data items in a cloud environment face challenges in maintaining confidentiality and security, particularly in multi-organizational settings where data from different entities must be kept separate and secure, with existing solutions lacking robustness against sabotage and unauthorized access.
Innovation Solution
A computer system with multiple sets of client computers, each belonging to a separate organizational entity, uses user-specific cryptographic keys and key identifiers for encryption and decryption, with a database system that stores encrypted data items and their key identifiers, allowing secure access while preventing inter-entity access and employing electronic signatures for additional security. The system includes portable devices for mobile access and automatic key erasure for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If encrypted data items are stored in a cloud database system accessible by multiple organizational entities, then data sharing and accessibility are improved, but confidentiality and security against unauthorized access deteriorate
Solution Approach 1:
The patent divides the database into multiple segregated data structures, with each organizational entity having its own isolated data space. This segmentation ensures that while multiple entities can access the database system, their data remains confidential and inaccessible to other entities, resolving the contradiction between data sharing and confidentiality.
Solution Approach 2:
The patent introduces a trusted third-party server as an intermediary that manages cryptographic key pairs and controls access to encrypted data. This mediator enables secure multi-entity access by acting as a neutral authority that authenticates users and manages encryption/decryption operations without exposing raw data, thus maintaining confidentiality while enabling accessibility.
2Reliability
If cryptographic keys are stored on client computers for encryption and decryption operations, then data security is improved, but vulnerability to sabotage and unauthorized access deteriorates
Solution Approach 1:
The patent extracts the cryptographic key management functions from client computers and relocates them to a secure trusted third-party server. Only encrypted data and key identifiers are stored locally on clients, while the actual cryptographic keys remain securely stored and managed on the server, eliminating the sabotage risk associated with local key storage while maintaining security operations.
Solution Approach 2:
The patent implements automatic key erasure mechanisms that destroy cryptographic keys under predetermined conditions (such as detected sabotage attempts, unauthorized access, or system compromise). This beforehand cushioning protects against sabotage by pre-preparing countermeasures that automatically neutralize threats before they can cause damage.
3Reliability
If electronic signatures are implemented for data item authentication, then data integrity is improved, but system complexity deteriorates
Solution Approach 1:
The patent combines the electronic signature generation and verification processes with the existing cryptographic key management infrastructure. The trusted third-party server that already manages encryption keys also handles signature operations, merging authentication functions into the existing security framework rather than adding separate complex systems, thus maintaining data integrity while minimizing additional complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to a computer system comprising: - multiple sets (S1, S2, Si,...,SI-1, SI) of client computers (Ci1, Ci2,...,Cij,...CiJ), each client computer having installed thereon an application program (104), the application program comprising client computer specific log-in information (Lij), - a database system (112) being coupled to the set of client computers via a network (114), the database system having a log-in component (118) for logging-in the client computers, the database system being partitioned into multiple relational databases (DB1, DB2,...DBi,...DBI), each one of the databases being assigned to one set of the sets of client computers, each database storing encrypted data items, each data item being encrypted with one of the user or user-group specific cryptographic keys, the key identifier of the cryptographic key with which one of the data items is encrypted being stored in the database as an attribute of the one of the encrypted data items, the log-in component comprising assignment information (118) indicative of the assignment of the databases to the set of client computers.