Key Server Data Access Control via Encryption Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge lies in protecting personal information shared on social networks, as once published, it becomes difficult to control access and remove due to widespread dissemination and archival, leading to privacy concerns and invasions.
Innovation Solution
A method involving encryption keys managed by a key server, allowing users to secure and control access to data files, enabling secure publication and restricted access, with options for decryption and deletion of access keys to manage data availability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If information is published to a public location on the Internet, then information sharing and accessibility are improved, but privacy protection and access control deteriorate
Solution Approach 1:
The system segments information access control by separating the published information from its decryption key. The information is encrypted and stored publicly, while the decryption key is stored separately in a key data store, allowing controlled access through key management rather than restricting information publication itself.
Solution Approach 2:
The system introduces a key server as an intermediary between the published encrypted information and users. The key server manages decryption keys and authentication, mediating access control without requiring restrictions on information publication or storage.
2Ease of operation
If encryption keys are stored on the key server for public access, then information accessibility is improved, but security control deteriorates
Solution Approach 1:
The system implements dynamic key management where access permissions can be modified at any time. The key server can dynamically grant or revoke access rights to decryption keys based on user authentication and permission settings, allowing flexible control over who can access encrypted information.
Solution Approach 2:
The system performs preliminary authentication and permission verification before providing decryption keys to users. The key server checks user credentials and access rights before releasing keys, ensuring security control is established before access is granted.
3Object-affected harmful factors
If users can delete access keys from the key server, then privacy protection is improved, but information availability deteriorates
Solution Approach 1:
The system converts the potential harm of key deletion into a benefit by implementing irreversible access control. When a key is deleted from the key server, it permanently prevents further unauthorized access while the encrypted information remains intact and can be re-accessed by authorized users through key reissuance or alternative authentication methods.
Data Source
AI summary
A first access key, which is provided by a key server for decrypting a file and the encrypted file is published on a public network by a first user. Every time the secured file is accessed by a second user, the first access key is provided by the key server to decipher the file. The first user can control access to the file by deleting the first access key on the key server, thus denying the second user access to the access key preventing de-encryption of the secured file.