Encryption Converter for Secure Local Data Format Migration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for changing encryption on a computer leave data vulnerable during the decryption process or are time-consuming and risky, especially when data must remain secure and local.
Innovation Solution
A method that adds a second layer of encryption to a computer's local hard drive without decrypting the data, locks the computer during conversion, and applies new encryption software remotely, allowing the first layer to be removed without exposing the data, while logging progress to a central server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the hard drive is decrypted and new encryption is installed, then the encryption can be converted, but the data becomes vulnerable and exposed during the process
Solution Approach 1:
The patent applies preliminary action by first creating a new encrypted volume with the target encryption type before removing the old encryption. The system pre-preares the encrypted volume with the new encryption scheme, ensuring that when the conversion completes, the data is already protected under the new encryption without ever being exposed in a decrypted state.
Solution Approach 2:
The patent uses an intermediary approach by introducing a temporary encrypted volume as a mediator between the old encrypted data and the new encryption scheme. This intermediate encrypted volume serves as a safe bridge, allowing the conversion process to occur without directly exposing the data to unauthorized access during the transition.
2Adaptability or versatility
If all data is copied to a server share and the drive is wiped, then the encryption can be changed, but the process is time-consuming and risky
Solution Approach 1:
The patent extracts the data from the old encrypted volume and places it into a new encrypted volume directly on the local drive, eliminating the need to copy data to a server share. This extraction approach maintains data security throughout the process while significantly reducing conversion time by avoiding network transfer operations.
Solution Approach 2:
The patent uses copying to create a new encrypted volume that replicates the data structure and content from the old volume. This copying operation occurs directly on the local drive using secure encryption, avoiding the time-consuming and risky process of copying data to and from a server share while maintaining data integrity and security.
3Adaptability or versatility
If the hard drive is decrypted and reencrypted, then the encryption type can be changed, but the data is vulnerable during the process
Solution Approach 1:
The system performs preliminary action by pre-creating the new encrypted volume with the target encryption type before initiating the conversion process. This ensures that when data is moved, the destination is already secured with the new encryption scheme, eliminating any window of vulnerability where data could be exposed during conversion.
Data Source
AI summary
A method for converting data on a computer from an original encrypted format to a new encrypted format without exposing the data in a decrypted state during the conversion process. The computer(s) is locked during the conversion process. The computer data is now re-encrypted to the new format, the original encryption is then removed, and the new encryption software is applied. Finally, the computer with its newly-encrypted data is unlocked for normal usage.