Secure Encrypted File Relocation Using Temporary Seeds
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Systems with non-volatile memory face challenges in relocating encrypted data during system upgrades without access to the original encryption keys, often resulting in data corruption due to the use of default keys.
Innovation Solution
A temporary encryption seed, comprising a randomly generated key and initialization vector, is used to decrypt and re-encrypt data, allowing secure relocation of encrypted files within non-volatile memory without relying on original or default keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If encrypted data is relocated using default keys during system upgrades, then relocation can proceed without access to original media keys, but data corruption occurs
Solution Approach 1:
The patent introduces an intermediary decryption/encryption process using temporary keys. The system generates temporary decryption keys and temporary encryption keys as intermediaries to facilitate safe data relocation. The encrypted data is first decrypted using temporary decryption keys, then re-encrypted using temporary encryption keys at the new location, preventing direct corruption that would occur with default keys.
Solution Approach 2:
The patent changes the encryption parameters during relocation by using temporary keys instead of default keys. The system modifies the key parameters temporarily for the relocation process, generating unique temporary decryption keys and temporary encryption keys that are specifically designed for safe data migration without causing corruption.
2Reliability
If original media keys are used for decryption during relocation, then data integrity is maintained, but the system cannot relocate data when original keys are inaccessible
Solution Approach 1:
The patent uses temporary decryption keys as intermediaries that can access encrypted data without requiring the original media keys. These temporary keys serve as a bridge, allowing the system to decrypt and relocate data even when original keys are unavailable, while maintaining data integrity through the controlled intermediary process.
Solution Approach 2:
The patent employs temporary, disposable keys that are generated specifically for the relocation operation and then discarded. These short-lived temporary decryption keys and temporary encryption keys enable the system to perform relocation without long-term dependency on original media keys, providing adaptability while maintaining security.
3Adaptability or versatility
If no-key access is attempted during relocation, then the system can proceed without encryption keys, but data corruption occurs due to automatic default key provision
Solution Approach 1:
The patent introduces temporary decryption keys as intermediaries that prevent the system from automatically using default keys during no-key access operations. By providing these temporary keys, the system can perform keyless relocation without falling back to harmful default key schemes, thus maintaining data integrity while achieving keyless operation.
Solution Approach 2:
The patent applies preliminary anti-action by pre-generating temporary decryption keys before the relocation operation. This preliminary key generation prevents the system from automatically provisioning default keys during the relocation process, blocking the harmful effect of default key usage before it can occur.
Data Source
AI summary
Systems and methods are disclosed for secure relocation of encrypted files for a system having non-volatile memory (“NVM”). A system can include an encryption module that is configured to use a temporary encryption seed (e.g., a randomly generated key and a corresponding initialization vector) to decrypt and encrypt data files in an NVM. These data files may have originally been encrypted with different encryption seeds. Using such an approach, data files can be securely relocated even if the system does not have access to the original encryption seeds. In addition, the temporary encryption seed allows the system to bypass a default key scheme.