Layered Data-Stream Encryption for Untrusted Cloud Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data stream distribution systems face challenges in securing sensitive data, particularly video surveillance feeds, due to the need for robust storage and access control, especially in untrusted cloud environments, and lack nuanced access management.
Innovation Solution
A method and system that employs a trusted network zone to encrypt data streams symmetrically with a key stream and asymmetrically encrypt the key stream with public keys, ensuring secure access control over untrusted networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Volume of stationary object
If data streams are stored in untrusted cloud environments, then storage capacity and accessibility are improved, but security and control over sensitive data deteriorate
Solution Approach 1:
The encryption key stream is segmented into multiple portions, each encrypted with a different public key. This allows the data to be stored in distributed cloud environments while maintaining security through key separation and controlled access to specific data portions.
Solution Approach 2:
A trusted network zone acts as an intermediary between data sources and cloud storage systems. This intermediary performs encryption operations before data leaves the trusted zone, ensuring that sensitive data is protected even when stored in untrusted cloud environments.
2Reliability
If symmetric encryption is applied to entire data streams, then security is improved, but computational overhead increases
Solution Approach 1:
The encryption approach extracts and encrypts only the essential key stream portions rather than encrypting the entire data stream. This reduces computational overhead while maintaining security for the most critical elements of the data transmission.
Solution Approach 2:
Different portions of the key stream are encrypted with different public keys based on their specific security requirements and access control needs. This local differentiation optimizes computational resources by applying encryption only where necessary.
3Ease of operation
If access control is simplified for cloud storage, then ease of operation is improved, but nuanced access management deteriorates
Solution Approach 1:
Different public keys are assigned to different portions of the encrypted key stream, enabling granular access control where different users or systems can access specific portions of the data based on their authorization. This maintains simplicity in the access control mechanism while achieving nuanced access management.
Solution Approach 2:
The system uses asymmetric encryption with public and private keys to enable simplified access control operations. Users can easily encrypt data with public keys without needing complex key management, while maintaining the ability to control access to specific data portions through asymmetric key pairs.
Data Source
AI summary
Technology permitting secure storage and transmission of data stream as well as tiered access to multiple data stream according to permission. Data streams may be encrypted using symmetric encryption performed with varying symmetric keys according to a key stream of symmetric keys. Native data may be discarded for safety. Whole or partial key streams may be encrypted using the public keys of authorized entities having permission to access respective data streams or portions thereof. Only the corresponding private keys can decrypt the encrypted key streams required to decrypt the encrypted data streams. Thus rigorous access control is provided. IT personnel accessing data stream files on a server or intruders maliciously obtaining files will not be able to derive the data stream. Sensitive data streams may be stored using cloud services despite inherent risks.