Encrypted Log Analysis Without Third-Party Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Utilities are reluctant to share sensitive security logs with third parties due to privacy concerns, necessitating either in-house analysis or trusting a third party with decryption keys, which is not aligned with their business model and security demands.
Innovation Solution
A method for analyzing encrypted security logs using a k-deterministic encryption scheme, allowing a third party to perform analysis on encrypted data without decrypting it, ensuring only the utility can interpret the results.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If the utility shares encrypted logs with a third party for analysis, then the analysis can be performed externally, but the third party can decrypt and access sensitive information
Solution Approach 1:
The patent introduces an intermediary encryption layer that allows the third party to analyze encrypted logs without accessing the plaintext. The encryption scheme acts as a mediator between the utility and the analysis system, enabling external analysis while preventing direct access to sensitive information.
Solution Approach 2:
The patent changes the state of the log data from plaintext to encrypted form before sharing with the third party. This parameter change (encryption state) allows the data to be processed externally while maintaining security, as the third party receives and analyzes only the encrypted representation of the logs.
2Object-affected harmful factors
If the utility performs security checks in-house, then privacy is maintained, but the analysis capacity and resources are limited
Solution Approach 1:
The patent segments the analysis function from the data storage. The utility maintains control over the encrypted logs and performs encryption locally, while the third party performs analysis on the encrypted data. This segmentation allows the utility to maintain privacy while leveraging external analysis capacity.
Solution Approach 2:
The encrypted log format serves as an intermediary that enables the utility to outsource analysis while maintaining privacy. The encryption layer acts as a mediator that allows third-party analysis without requiring the utility to share decryption capabilities.
3Extent of automation
If the utility trusts a third party with decryption keys, then analysis can be performed externally, but security control is lost
Solution Approach 1:
The patent uses encryption as an intermediary mechanism that enables external analysis without transferring security control. The third party analyzes encrypted data without possessing the decryption keys, maintaining security control with the utility while enabling automated external analysis.
Solution Approach 2:
The patent changes the data parameter from decryptable to encrypted form, allowing the third party to perform analysis on the encrypted representation without gaining access to the original sensitive information, thus maintaining security control.
Data Source
AI summary
A method can be used to analyze a log of a device or a plurality of devices of a first entity. The method includes generating an encrypted log by encrypting the log at the first entity, generating an encrypted query by encrypting a query at the first entity, transferring the encrypted log and the encrypted query from the first entity to a second entity, analyzing the encrypted log on the second entity by using the encrypted query, generating an encrypted analysis result at the second entity, transferring the encrypted analysis result from the second entity to the first entity, decrypting the encrypted analysis result on the first entity, and verifying the decrypted analysis result at the first entity.