Distributed Encryption Key Tokenization for Secure Data Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional methods for securely transferring data, such as those using SSL protocols, are inadequate as they can be susceptible to hacking, and unauthorized entities may access encryption keys stored on devices, compromising data security.
Innovation Solution
A system where a data device generates an encryption key, breaks it into key portions, and transmits these portions as storage tokens instead of the actual key, allowing the receiving device to reassemble the key for decryption without storing the key on either device, enhancing security by preventing key interception and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional SSL protocols are used for data transfer, then data can be transmitted over the network, but the encryption keys stored on devices are vulnerable to hacking and unauthorized access
Solution Approach 1:
The encryption key is divided into multiple key portions that are distributed across different devices. Each device stores only a portion of the key, making it impossible for any single device or hacker to obtain the complete key, thus resolving the vulnerability of centralized key storage
Solution Approach 2:
The complete encryption key is extracted from device storage and replaced with key portions stored as tokens. The actual key never resides on any device, eliminating the target for hackers while still enabling decryption when key portions are reassembled
2Ease of operation
If encryption keys are stored on devices for decryption, then data can be decrypted locally, but the stored keys become targets for hacking and unauthorized access
Solution Approach 1:
The encryption key is segmented into multiple portions, with each portion stored on different devices as tokens. This maintains local decryption capability through token reassembly while eliminating the vulnerability of storing complete keys on any single device
Solution Approach 2:
Tokens serve as intermediaries that represent key portions without containing the actual key material. These tokens enable local decryption operations while acting as a protective layer that prevents direct access to the encryption key, thus resolving the contradiction between operational ease and security
3Productivity
If complete encryption keys are transmitted for data decryption, then receiving devices can decrypt data, but the transmitted keys are susceptible to interception
Solution Approach 1:
The encryption key is divided into multiple key portions that are transmitted separately as tokens embedded in data packets. This maintains data transfer efficiency while preventing interception of the complete key, as hackers would need to intercept and reassemble multiple separate tokens
4Reliability
If traditional encryption methods are used, then data can be encrypted and decrypted, but the encryption keys must be stored and managed on devices creating security risks
Solution Approach 1:
The encryption key management system is segmented across multiple devices, with each device holding only a portion of the key as a token. This reduces the complexity and risk associated with key management on individual devices while maintaining reliable data encryption through distributed key reassembly
Data Source
AI summary
According to one example, a system includes a first computing device that includes one or more processors configured to generate a first encryption key, and encrypt data, using the first encryption key, for transmittal to a second computing device. The one or more processors are further configured to determine a first set of tokens; determine, from the first set of tokens, a plurality of tokens for the first encryption key; generate a packet comprising the encrypted data, and further comprising the plurality of tokens; and transmit the packet for receipt by the second computing device.