Hybrid File Encryption System with Segmented Key Storage

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Entities face vulnerabilities when using local encryption for large or sensitive files, as it leaves them exposed to malicious actors, and transmitting these files to an encryption server for encryption poses inherent risks.

Innovation Solution

A system that encrypts files locally using a local file encryption key, then transmits encryption requests to an encryption server to encrypt specific portions of the file, allowing the server to store encryption keys securely, thereby reducing exposure while maintaining the benefits of the client-server model.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If files are transmitted to an encryption server for encryption, then encryption security is improved, but data exposure risk increases during transmission

Engineering Contradiction:

Improveencryption securityVSAvoiddata exposure risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent segments the file into multiple portions and encrypts each portion separately. The encryption key is also segmented into multiple key portions. This segmentation prevents the need to transmit the entire file or complete key to the server, reducing data exposure risk while maintaining encryption security.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent performs preliminary local encryption of the file using a local encryption key before transmitting to the server. The server then applies a second layer of encryption. This preliminary action ensures that even if transmission is intercepted, the data is already encrypted, reducing exposure risk.

Inventive Principle:

Principle #10Preliminary action

2Object-affected harmful factors

If local encryption is used to avoid transmission risks, then data exposure risk is reduced, but security against malicious actors increases vulnerability

Engineering Contradiction:

Improvedata exposure riskVSAvoidsecurity against malicious actors

Core Design Contradiction:

Object-affected harmful factorsVSReliability

Solution Approach 1:

The patent merges local encryption with server-side encryption in a hybrid approach. The local system performs initial encryption and stores encrypted data, while the encryption server provides additional security layers and key management. This combination maintains low exposure risk while improving security against malicious actors through server-side protections.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The encryption server acts as an intermediary that holds encrypted key portions and provides authentication services. Instead of storing complete decryption keys locally (which would be vulnerable to local attacks), the system uses the server as a secure intermediary that releases key portions only after successful authentication, improving security against malicious actors while maintaining low exposure during normal operations.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Speed

If complete encryption keys are stored locally for fast decryption, then decryption speed is improved, but security vulnerability increases

Engineering Contradiction:

Improvedecryption speedVSAvoidsecurity vulnerability

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The encryption key is segmented into multiple key portions distributed between the local system and the encryption server. During decryption, the local system has immediate access to its key portions for fast initial decryption, while the server provides additional key portions after authentication. This segmentation maintains security by not storing complete keys locally while enabling fast decryption through the locally-held portions.

Inventive Principle:

Principle #1Segmentation

4Reliability

If files are encrypted in multiple layers using client-server model, then encryption security is improved, but system complexity increases

Engineering Contradiction:

Improveencryption securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the complex key management and authentication functions into a separate encryption server, while the local system focuses on file encryption and storage operations. This extraction reduces local system complexity by offloading key management responsibilities to the server, while maintaining multi-layer encryption security through the distributed architecture.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS11928223B2System for implementing enhanced file encryption technique

Publication Date: 2024.03.12 BANK OF AMERICA CORP

AI summary

Systems, computer program products, and methods are described herein for implementing enhanced file encryption technique. The present invention is configured to receive a request from a computing device of a user to encrypt a file; encrypt the file using a local file encryption key to generate an encrypted file; transmit, via an encryption engine, a first encryption request to an encryption server to encrypt a first portion of the encrypted file; receive, from the encryption server, an encrypted first portion of the encrypted file based on at least the first encryption request, wherein the first portion of the encrypted file is encrypted by the encryption server using a first file encryption key; append the encrypted first portion of the encryption file with a remaining portion of the encrypted file to generate a final encrypted file; and store the final encrypted file in a data repository.