Encrypted Job Log Search via Duplicate Key Intermediary

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Managing job logs in a cloud service poses security and privacy concerns, particularly when decrypting user information, as existing systems require decrypting all job logs to perform searches, which can compromise confidentiality.

Innovation Solution

An information processing apparatus encrypts a search value using a duplicate key and transmits it to a server, allowing the server to perform search processing on encrypted job logs without decrypting the entire log set, ensuring that only the necessary data is decrypted for retrieval.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If job logs are decrypted in the cloud service to perform search processing, then search functionality is enabled, but security and privacy are compromised due to exposure of user information

Engineering Contradiction:
Improvesearch functionalityVSAvoidsecurity and privacy risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an intermediary encryption mechanism where search queries are encrypted using a public key before being transmitted to the cloud server. The server performs search operations on encrypted job logs without decrypting them, using a secret key that never leaves the client device. This intermediary encryption layer enables search functionality while maintaining security and privacy by preventing exposure of user information during search operations.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If all job logs are decrypted to perform comprehensive search, then search accuracy is improved, but data exposure and privacy concerns increase

Engineering Contradiction:
Improvesearch accuracyVSAvoidconfidential information exposure
Core Design Contradiction:
Measurement precisionVSLoss of information

Solution Approach 1:

The patent extracts only the necessary portion of data processing by performing search operations directly on encrypted job logs in the cloud server without extracting or decrypting the full content. The search process works with encrypted data using the secret key, extracting only matching results while leaving the bulk of confidential information encrypted and protected throughout the search process.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If job logs are stored encrypted in cloud service, then security is improved, but search processing becomes complex requiring decryption

Engineering Contradiction:
Improvedata securityVSAvoidsearch processing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by pre-distributing the secret key to authorized devices before search operations are needed. This allows the search processing to proceed on encrypted data without requiring complex real-time decryption of all job logs. The encryption/decryption infrastructure is set up in advance, enabling simple search operations on encrypted data while maintaining security.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11307815B2Information processing apparatus, method, and non-transitory computer-readable storage medium to encrypt search value for searching job log using first key and server performs search process
Publication Date: 2022.04.19 CANON KK
  • US11307815B2 patent drawing
  • US11307815B2 patent drawing
  • US11307815B2 patent drawing

AI summary

An information processing apparatus communicates with a server via a network, the server configured to manage a plurality of job logs on which encryption processing is executed by an image processing apparatus using a first key. The information processing apparatus includes at least one memory storing instructions, and at least one processor executing the instructions causing the information processing apparatus to encrypt a value used for searching for a job log using another first key being a duplicate of the first key, transmit a search request including the encrypted value to the server via the network, acquire an encrypted job log based on a response from the server, and execute decryption processing for decrypting the encrypted job log. The server executes search processing using the encrypted value included in the search request without decrypting the plurality of job logs managed.