Image-Based Cloud Data Encryption Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud data storage systems face vulnerabilities due to inadequate security measures, reliance on system administrators, and potential legal requirements for cryptographic key disclosure, necessitating improved encryption methods.
Innovation Solution
Implement image-based encryption systems where a cryptographic key is generated based on an image file that users can remember, allowing them to recreate the key for decryption, using modules for identification, image processing, and encryption within cloud data stores.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cloud services store encrypted data with cryptographic keys, then data security is improved, but the cryptographic keys may still be accessible to system administrators creating a security vulnerability
Solution Approach 1:
The patent extracts the cryptographic key management from the cloud service provider's control and places it entirely under user control. Users generate, store, and manage their own cryptographic keys locally on their devices, while only encrypted data is stored in the cloud. This separation eliminates the security vulnerability where cloud administrators could access cryptographic keys, as the keys never reside on cloud infrastructure.
Solution Approach 2:
The system segments cryptographic key management into distinct components: key generation, key storage, and key usage are separated and performed locally on user devices. The cloud service only handles encrypted data storage and retrieval operations, never accessing the actual cryptographic keys. This segmentation ensures that even if cloud infrastructure is compromised, the cryptographic keys remain secure on user devices.
2Ease of operation
If users rely on cloud service security practices, then ease of operation is improved, but security reliability deteriorates due to dependence on provider competence
Solution Approach 1:
Users perform self-service cryptographic key management on their own devices without requiring cloud service provider intervention. The system provides automated key generation and management tools that users control entirely themselves, eliminating dependence on provider security practices while maintaining ease of operation through user-friendly interfaces and automated processes.
3Reliability
If cryptographic keys are stored securely, then data protection is improved, but users cannot access their data if keys are lost or forgotten
Solution Approach 1:
The system performs preliminary actions by automatically generating cryptographic key pairs and securely storing them locally on user devices before any data encryption occurs. Recovery mechanisms are pre-configured, allowing users to restore access to their cryptographic keys and encrypted data through approved methods without requiring cloud service provider intervention, thus maintaining both security and accessibility.
Data Source
AI summary
The disclosed computer-implemented method for image-based encryption of cloud data may include (1) identifying a user account for a cloud data store, wherein the cloud data store stores at least one secret to be secured by encryption on behalf of the user account, (2) receiving an image file to be used at least in part to generate a cryptographic element to be used for encrypting the secret, the cryptographic element capable of being re-created when the image file is provided again at a later time, (3) using at least one cryptographic function, generating the cryptographic element based at least in part on the image file, and (4) securing the secret by encrypting the secret using the cryptographic element. Various other methods, systems, and computer-readable media are also disclosed.