Intermediary Database Encryption for Distributed Data Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for exchanging data between computing devices lack proper security and fail to determine what data is available for transfer, especially in networks with multiple devices and data sources.
Innovation Solution
A system and method involving a first computing device encrypting data using a first encryption key, transmitting it to an intermediary database, receiving a second encryption key, and encrypting the data again for a second computing device, while using an intermediary database that can be a blockchain to facilitate secure data transfer and transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is transferred between computing devices without encryption, then data exchange simplicity is maintained, but security and privacy are compromised
Solution Approach 1:
The patent introduces a data exchange system with intermediary components (data exchange server, key management server) that mediate between data providers and data consumers. These intermediaries handle encryption key management, data encryption/decryption coordination, and transaction facilitation, thereby providing strong security without requiring complex encryption implementation at each endpoint device.
Solution Approach 2:
The system implements automated key management where computing devices automatically receive encryption keys from the key management server and perform self-encryption of data before upload. The system also automatically matches data providers with consumers based on data descriptions and requirements, reducing manual intervention complexity while maintaining security.
2Reliability
If multiple encryption keys are used for different computing devices, then security is enhanced, but the encryption and decryption process becomes more complex
Solution Approach 1:
The key management server acts as an intermediary that automatically generates, distributes, and manages encryption keys for multiple computing devices. It handles the complexity of key generation and distribution, providing devices with appropriate keys without requiring them to manually manage multiple keys or understand key management protocols.
Solution Approach 2:
The system creates and distributes copies of encryption keys through the key management server to authorized computing devices. Each device receives a copy of the relevant encryption key needed for its operations, eliminating the need for manual key replication and simplifying the key distribution process while maintaining security through controlled key copying.
3Reliability
If an intermediary database is introduced to facilitate secure data transfer, then security and transparency are improved, but system complexity increases
Solution Approach 1:
The patent combines multiple functions into integrated system components: the data exchange server handles data storage, retrieval, and matching; the key management server handles key generation, distribution, and rotation; and these work together with computing devices to provide end-to-end security. This functional integration reduces overall system complexity compared to having separate independent components for each function.
Solution Approach 2:
The data exchange server and key management server are designed as universal intermediaries that can serve multiple computing devices and handle various types of data exchanges. These intermediaries provide multi-functional capabilities including authentication, encryption coordination, data matching, and transaction management, reducing the need for device-specific infrastructure and simplifying the overall system architecture.
4Reliability
If data is encrypted before upload to the intermediary database, then privacy is protected, but data usability and accessibility are reduced
Solution Approach 1:
The data exchange server acts as an intermediary that stores encrypted data and coordinates with the key management server to provide decryption capabilities to authorized users. The intermediary manages the relationship between encrypted storage and controlled access, allowing data to remain encrypted at rest while being accessible to authorized consumers through the coordinated key management process.
Solution Approach 2:
The system creates and distributes copies of decryption keys to authorized data consumers through the key management server. This allows the original encrypted data to remain protected in storage while authorized users receive key copies that enable them to decrypt and use the data, thereby maintaining both privacy protection and data accessibility without requiring the original data to be decrypted and stored in plaintext.
Data Source
AI summary
Aspects of the disclosure relate to a system and method for cryptographically protecting data transferred between spatially distributed computing devices. An intermediary database may be used to facilitate the protected data transfer and/or record the data transfers. A first computing device may transfer, to the intermediary database, encrypted data that may be securely transferred to other computing devices. A second computing device may generate a GUI used to view data available from the intermediary database. Once data is selected by the second device, the second device may transfer a key (or other encryption mechanism) to the first device. The first computing device may encrypt the data using the received key and transmit the encrypted data to the intermediary database. The intermediary database may transmit the encrypted data to the second computing device, and the second computing device may decrypt and use the data.