Key Management System for GDPR Data Deletion in Cloud Backups
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for deleting personal data in cloud-based environments, particularly in backup storage copies, are complex and resource-intensive, especially when data is stored in remote locations or clouds, making it difficult for organizations to comply with regulations like GDPR's 'right to be forgotten' due to the lack of easy access and management of secondary database copies.
Innovation Solution
A system utilizing a gateway API service in public cloud environments to mediate between cloud databases and applications, employing symmetric encryption/decryption algorithms like AES-256, managed by a Key Management System (KMS), which restricts access to sensitive data by encrypting it at rest and deleting the decryption key to render data permanently inaccessible, thus simplifying the deletion process across all copies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional methods are used to delete personal data from backup copies, then data privacy compliance is achieved, but the process becomes complex and resource-intensive requiring physical access to remote copies
Solution Approach 1:
The system performs preliminary encryption of data at rest in backup copies before deletion is needed. By encrypting data with unique keys for each backup copy and storing those keys separately, the system ensures that when deletion is required, it can simply delete the key rather than physically accessing and modifying remote backup copies, thus achieving compliance without complex processes
Solution Approach 2:
The patent introduces a key management system as an intermediary between the backup storage system and the deletion process. This mediator manages encryption keys separately from the actual data, allowing deletion operations to be performed by key management rather than direct data manipulation, simplifying the overall deletion process while ensuring compliance
2Reliability
If all backup copies are accessed and modified to delete personal data, then complete erasure is achieved, but the process becomes resource-intensive especially for remote cloud-stored copies
Solution Approach 1:
The patent extracts the deletion operation from the physical data itself and applies it to the encryption key instead. By separating the key from the data and making the key the target of deletion operations, the system achieves complete erasure of accessible data without needing to physically access or modify every remote backup copy, significantly reducing computational resources
Solution Approach 2:
The system changes the parameter being deleted from the data content itself to the encryption key parameter. This parameter transformation allows deletion to be performed on a small, manageable object (the key) rather than on large, distributed data copies, achieving the same security effect with minimal resource consumption
3Reliability
If physical access is required to delete data from remote backup copies, then data security is maintained, but the deletion process becomes impractical for cloud-based systems
Solution Approach 1:
The patent replaces the mechanical approach of physically accessing and mounting remote backup copies with a cryptographic approach. By substituting physical access requirements with key-based security controls, the system maintains data security while enabling remote, accessible deletion operations through key management systems without requiring physical presence at storage locations
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach allows for efficient and seamless deletion of multiple data copies, ensuring compliance with data privacy regulations by rendering sensitive data inaccessible without the need for physical access or complex data retrieval processes, thereby simplifying the implementation of GDPR's 'right to be forgotten' in cloud-based systems.
Implementation Method 1
employing symmetric encryption/decryption algorithms like AES-256, managed by a Key Management System (KMS), which restricts access to sensitive data by encrypting it at rest and deleting the decryption key
Data Source
AI summary
In a public cloud that stores data in a database system for a plurality of entities as primary data and as one or more secondary backup copies of the primary data, the data being stored in predefined data fields of data records, personal private data of each entity is stored encrypted using an encryption/decryption key that is unique to each different entity. The encryption/decryption keys are stored in the cloud in a key store of a key management system. To delete the personal private data of a particular entity, as to comply with the right to be forgotten pursuant to GDPR regulations, or otherwise, the encryption/decryption key for that particular entity is deleted from the key store to render permanently inaccessible all copies of that entity's personal private data.