Multi-Layer Encrypted Data Storage With User-Held Decryption Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage systems face vulnerabilities where encryption keys are accessible, allowing unauthorized access and coerced data production, violating privacy laws and increasing the risk of data theft.
Innovation Solution
A system and method for secure data storage that employs multiple encryption layers, with only the user possessing one necessary decryption key, ensuring data is inaccessible without user permission, using a data intake device and a data management system to create and manage encryption keys, and storing encrypted data on a public blockchain architecture.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple encryption layers are implemented, then data security is improved, but data file length increases
Solution Approach 1:
The patent divides the encryption process into multiple independent layers, each with its own encryption key. The data is segmented through successive encryption operations where each layer adds a specific encryption transformation. This segmentation approach allows the system to maintain high security through multiple layers while managing the complexity through structured key management and separate encryption modules for each layer.
2Ease of operation
If encryption keys are made accessible to the storage system, then data retrieval is simplified, but data security is compromised
Solution Approach 1:
The patent extracts the encryption keys from the storage system and places them exclusively in the possession of the user. The storage system stores only the encrypted data without access to any decryption keys. This extraction resolves the contradiction by removing keys from the storage environment entirely, ensuring that even if the storage system is compromised, the encrypted data remains secure. Data retrieval is simplified through automated key management processes that handle the complex decryption operations without requiring user intervention.
Solution Approach 2:
The patent introduces an intermediary key management system that facilitates secure data retrieval without giving the storage system direct access to encryption keys. This intermediary layer handles key protection, key distribution, and decryption coordination, allowing the storage system to retrieve encrypted data while maintaining security boundaries. The intermediary ensures that keys never expose the storage system, yet retrieval remains efficient through automated processes.
3Reliability
If independent key generation for each encryption layer is implemented, then security against key compromise is improved, but key management complexity increases
Solution Approach 1:
The patent implements self-service mechanisms where the system automatically generates, manages, and coordinates multiple encryption keys without requiring manual intervention. The key management system autonomously handles key generation for each encryption layer, stores keys securely in protected memory, and coordinates their use during encryption and decryption operations. This automation reduces the perceived complexity for users while maintaining the security benefits of independent key generation for each layer.
Data Source
AI summary
A computer system and method for storage and retrieval of multiple encrypted data. The system and method allow a user to first encryption data with a first key only held by the user such that the user solely possesses one of the necessary keys for later decryption of the stored and encrypted data. The firstly encrypted data is then doubly encrypted and stores the data in such a secure manner that the data can be stored on a public blockchain architecture, if desired. Full decryption of the original user data can only be performed with access to the user's initial key.