Fault-Tolerant Data Storage with Encrypted Shards and Threshold Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Critical data records are at risk of corruption or unavailability due to device failure, hacking, and power loss, inhibiting their use in high-value applications and making them untrustworthy.
Innovation Solution
A fault-tolerant data storage system utilizing a distributed synchronized database with encryption, unique identifiers, and off-chain computer resources to enhance security and ensure data integrity, employing decentralized networks and smart contracts for secure, verifiable transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored using conventional centralized storage, then storage simplicity is maintained, but data reliability and security deteriorate due to risks of corruption, hacking, and device failure
Solution Approach 1:
The patent segments data into multiple shards that are distributed across different nodes in a decentralized network. Each shard is stored separately, and the system uses threshold cryptography where any threshold number of shards can reconstruct the original data. This segmentation approach eliminates single points of failure while maintaining data accessibility, directly resolving the contradiction between reliability and complexity.
Solution Approach 2:
The patent introduces cryptographic intermediaries including threshold secret sharing schemes and zero-knowledge proofs that mediate between data storage and data access. These cryptographic mechanisms enable secure data reconstruction from distributed shards without requiring centralized coordination, thereby improving reliability while managing complexity through mathematical abstractions.
2Object-affected harmful factors
If data is encrypted and distributed across decentralized nodes, then data security is improved, but data access and transaction execution complexity increases
Solution Approach 1:
The patent implements smart contracts that automatically execute transactions and enforce business logic on the decentralized network without requiring manual intervention. The system self-manages key generation, shard distribution, and data reconstruction processes through automated cryptographic protocols, reducing operational complexity despite enhanced security requirements.
Solution Approach 2:
The patent dynamically adjusts cryptographic parameters such as threshold values for secret sharing and encryption key lengths based on security requirements and performance considerations. This parameter optimization allows the system to balance security strength with computational efficiency, managing the trade-off between security and operational complexity.
3Ease of operation
If all nodes have access to complete data for rule execution, then transaction processing is simplified, but data privacy and security deteriorate
Solution Approach 1:
The patent extracts only the necessary data elements required for smart contract execution from the encrypted data shards, processing them in a privacy-preserving manner. Nodes can verify and execute transactions based on cryptographic proofs without accessing or exposing the underlying sensitive data, thereby maintaining both operational efficiency and data privacy.
Solution Approach 2:
The patent introduces zero-knowledge proof mechanisms as intermediaries that allow nodes to verify transaction validity and execute smart contracts without revealing the actual data being processed. These cryptographic proofs serve as mediators that enable transaction processing while preserving data confidentiality, resolving the contradiction between ease of operation and data privacy.
Data Source
AI summary
An aspect relates to generation of a plurality of elements, receiving an encrypted communication of a first entity from a client requesting an element, record a transfer of the element on a distributed synchronized database to the first entity, using transferred resources to enable a first user to obtain a right in a second entity, wherein the second entity controls an object; generate a unique identifier for the first user, thereby providing enhanced anonymity and security, recording on the distributed synchronized database a certificate corresponding to the first user right, recording rules related to a transaction related to the first object, determining whether a rule is to be executed using an off-chain computer resource using a decentralized network comprising a plurality of independent nodes wherein none of the nodes has access to all of the data to be used in executing the rule thereby enhancing data security.