Segregated Data Backup via Encrypted Subset Distribution

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users are reluctant to back up their data to remote devices due to concerns about privacy and unauthorized access, despite the importance of data redundancy, as existing solutions do not adequately ensure the security and privacy of stored data.

Innovation Solution

The system encrypts data items, divides them into encrypted subset data items, and randomly distributes these across multiple remote electronic devices, with only the primary device maintaining the mapping of where each subset is stored, ensuring that no single device can decrypt the data without all pieces, thus maintaining high privacy and security levels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data is backed up to remote devices, then data redundancy and accessibility are improved, but data security and privacy are compromised

Engineering Contradiction:
Improvedata redundancyVSAvoidunauthorized access
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent divides encrypted data into multiple encrypted subsets and distributes them across different remote devices. No single device contains the complete data, making unauthorized access ineffective even if one device is compromised. This directly resolves the contradiction by maintaining redundancy while enhancing security through distribution.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a secure enclave as an intermediary layer between the user device and remote storage devices. The secure enclave manages encryption keys and controls access to encrypted subsets, acting as a mediator that enables remote backup while preventing unauthorized access. This intermediary mechanism resolves the trust issue inherent in remote storage.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If data is encrypted and divided into subsets, then data security is improved, but system complexity increases

Engineering Contradiction:
Improvedata securityVSAvoidsystem complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent implements automatic encryption and subset distribution mechanisms that operate without requiring user intervention. The system self-manages the complex tasks of encryption, division, distribution, and reconstruction, reducing the perceived complexity for users while maintaining high security standards. This automation resolves the contradiction by handling complexity internally while presenting a simple interface.

Inventive Principle:
Principle #25Self-service

3Object-affected harmful factors

If data is stored locally, then data security is maintained, but data accessibility and redundancy are limited

Engineering Contradiction:
Improvedata securityVSAvoiddata accessibility
Core Design Contradiction:
Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The patent transitions data storage from a single location (local device) to multiple distributed locations (remote devices), adding a spatial dimension to storage architecture. This dimensional change enables both security through distribution and accessibility through multiple access points, resolving the contradiction between security and accessibility by operating in a multi-dimensional storage space.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS11416632B2Methods, systems, and devices for segregated data backup
Publication Date: 2022.08.16 MOTOROLA MOBILITY LLC
  • US11416632B2 patent drawing
  • US11416632B2 patent drawing
  • US11416632B2 patent drawing

AI summary

A method in an electronic device designates, with one or more processors of the electronic device, at least one data item stored within a memory of the electronic device for storage in a plurality of remote electronic devices. The method encrypts, with the one or more processors, the at least one data item to create at least one encrypted data item. The method divides, with the one or more processors, the at least one encrypted data item into a plurality of encrypted subset data items. The method then delivers, with a communication device, at least a first encrypted subset data item from the plurality of encrypted subset data items to a first remote electronic device and at least a second subset data item from the plurality of encrypted subset data items to a second remote electronic device.