Encrypted Repository Authentication Without Password Exposure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing online transaction systems lack effective methods to secure personal information from phishing, malware, and data breaches, exposing users' passwords and financial account information.
Innovation Solution
A fully encrypted repository system using Elliptic Curve Cryptography (ECC-160) public key pairs for secure authentication and encryption, with a user module and data repository that encrypts and decrypts data, and a user device that manages encryption keys, ensuring secure storage and retrieval of sensitive data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If personal information is transmitted over the Internet for online transactions, then transaction convenience is improved, but security against phishing, malware, and data breaches deteriorates
Solution Approach 1:
The system segments personal information into multiple encrypted components stored in a distributed repository structure. Each piece of information is encrypted with unique keys and stored in separate encrypted containers, preventing attackers from retrieving complete unencrypted data even if they compromise part of the system.
Solution Approach 2:
The patent introduces an intermediary encrypted repository system between the user and the transaction platform. This intermediary layer encrypts personal information before transmission and decryption occurs only in the user's controlled environment, preventing direct exposure of sensitive data during online transactions.
2Reliability
If encryption is implemented to protect data, then security is improved, but system complexity increases
Solution Approach 1:
The system performs preliminary encryption of personal information before it leaves the user's device. Data is encrypted locally using cryptographic keys generated and stored only on the user's device, eliminating the need for complex server-side encryption infrastructure while maintaining high security standards.
Solution Approach 2:
The encrypted repository system enables users to manage their own encryption keys and access control independently. The system provides self-service capabilities for key generation, data encryption, and selective decryption, reducing the need for complex centralized key management infrastructure.
Data Source
AI summary
According to an embodiment of the present invention, a method for using information in conjunction with a data repository includes encrypting data associated with the information with an encryption key, sending at least the encrypted data to the data repository, and possibly deleting the information. The method also includes receiving a request for the information from a remote device, and sending a request for the encrypted data to the data repository. The method further includes receiving the encrypted data from the data repository, decrypting the encrypted data using the encryption key, and sending the information to the remote device.