Encrypted Key Sharing for Secure Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage services face challenges in protecting stored data from unauthorized access, which can lead to compromised integrity and inefficient resource utilization.
Innovation Solution
A stateless system that enables secure sharing of access to encrypted data by determining a sharing encryption key based on an access private key and an assigned public key, encrypting the access private key, and transmitting it to enable authorized access without exposing unencrypted data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored in unencrypted format for easy access, then ease of operation is improved, but security and reliability deteriorate
Solution Approach 1:
The system segments the data access process into multiple encrypted components: data is encrypted with a data encryption key, and the data encryption key itself is encrypted with a user's public key. This segmentation allows secure storage while maintaining access capability through proper key management.
Solution Approach 2:
The patent introduces encrypted key containers as intermediaries between the stored data and user access. The container encrypts the data encryption key using the user's public key, creating a secure intermediary layer that enables authorized access without exposing unencrypted data or keys during storage.
2Reliability
If data is encrypted for security protection, then reliability is improved, but ease of operation deteriorates
Solution Approach 1:
The system performs preliminary encryption actions during data ingestion: data is encrypted with a data encryption key, and the data encryption key is pre-encrypted with the user's public key before storage. This preliminary action ensures security is built-in from the start, and authorized users can access data efficiently using their private keys without dealing with complex encryption during access.
Solution Approach 2:
The encrypted key container serves as a mediator that simplifies access for authorized users. When a user needs access, they use their private key to decrypt the container, which then provides the data encryption key needed to access the data. This intermediary structure maintains security while enabling straightforward access for authorized users.
3Adaptability or versatility
If access private key is shared for collaboration, then adaptability is improved, but security deteriorates
Solution Approach 1:
The system applies local quality by encrypting the data encryption key differently for each user using their individual public key. Each user receives a customized encrypted container that can only be decrypted by their specific private key. This allows selective sharing where different users have different access credentials, maintaining security while enabling collaboration.
Solution Approach 2:
The access control is segmented into individual user-specific encrypted containers. Instead of sharing a single private key, the system creates separate encryption layers for each user using their public key. This segmentation allows collaborative access while maintaining individual security boundaries, as each user's access is independently controlled through their own key pair.
Data Source
AI summary
The present disclosure discloses determining, by a first device, an access key pair associated with encrypted content, the access key pair including a content access public key and a content access private key; receiving, by the first device, a public key associated with a second device; encrypting, by the first device, the content access private key based at least in part on utilizing the content access private key and the public key associated with the second device; and transmitting, by the first device, the encrypted content access private key to enable the second device to access the encrypted content. Various other aspects are contemplated.