Self-Sufficient Encrypted Database Backup for Secure Migration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Database backup files are insecure due to the inclusion of external encryption keys, which can be decrypted by unauthorized parties, compromising data security during migration and recovery processes.
Innovation Solution
Implementing a self-sufficient encrypted database backup system where encryption keys are encrypted using asymmetric cryptography or passwords, ensuring only authorized parties can decrypt the data by using a private key or password, thus securing the backup files.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption keys are included in database backup files, then data can be decrypted and recovered, but security is compromised because unauthorized parties can access the keys
Solution Approach 1:
The patent extracts the encryption keys from the backup files and stores them separately in a secure key management system. This separation ensures that even if backup files are accessed by unauthorized parties, the encryption keys remain protected and cannot be used to decrypt the data.
Solution Approach 2:
The patent introduces a key management system as an intermediary between the backup files and the encryption keys. This intermediary system securely stores and manages the keys, providing controlled access only to authorized users while preventing direct access to the keys from unauthorized parties.
2Object-affected harmful factors
If encryption keys are stored externally separate from backup files, then security is improved, but complexity increases due to additional key management systems
Solution Approach 1:
The patent implements a key management system that serves multiple functions: storing encryption keys, managing key rotation, controlling access rights, and facilitating backup and recovery operations. This multi-functionality reduces the need for separate components and simplifies the overall system architecture.
Solution Approach 2:
The key management system automatically performs key rotation, access control, and security management without requiring manual intervention. This self-service capability reduces operational complexity and ensures consistent security practices throughout the system.
3Productivity
If data is encrypted using symmetric encryption, then encryption speed is fast, but security is insufficient because both parties need to share the same key
Solution Approach 1:
The patent employs a hybrid encryption approach that segments the encryption process into two parts: symmetric encryption for fast data encryption and asymmetric encryption for secure key exchange. The symmetric key is used to encrypt the actual data, while asymmetric keys secure the transmission and storage of the symmetric key itself.
Solution Approach 2:
The patent utilizes asymmetric encryption for key management and symmetric encryption for data encryption. This asymmetric approach allows different parties to have different keys, eliminating the need for key sharing while maintaining both speed and security. The asymmetric keys provide secure key exchange without requiring both parties to possess the same key.
Data Source
AI summary
Embodiments are described for a system comprising a first database server comprising a first master database and a first user database and a second database server comprising a second master database and a second user database. The first database server is configured to select one or more encryption keys from the first master database and the first user database; generate a database backup file based on data content of the first user database and the one or more encryption keys, wherein the data content is encrypted by at least one data encryption key of the one or more encryption keys. The first database server is further configured to encrypt the one or more encryption keys with asymmetric keys or passwords and transmit the database backup file to the second database server.