Mobile Data Encryption via Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage methods on mobile devices are insecure, as sensitive data is either stored in plaintext or encrypted with a single key, making them vulnerable to attacks and lacking dynamic security updates.
Innovation Solution
A method and apparatus for encrypted storage of data on mobile devices, where an encryption key is generated and divided into multiple portions, stored across multiple media, and encrypted data is also fragmented for enhanced security, with dynamic risk control levels allowing for flexible encryption levels based on data type.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If sensitive data is stored in plaintext on a client, then ease of operation is improved, but security is worsened
Solution Approach 1:
The encryption key is divided into multiple key portions (first key portion, second key portion, etc.) that are stored separately in different storage media. This segmentation prevents a single point of failure and requires multiple components to be compromised simultaneously, thereby maintaining security while enabling operational access.
2Reliability
If sensitive data is encrypted with a single key, then security is improved, but vulnerability to brute-force cracking is worsened
Solution Approach 1:
The single encryption key is segmented into multiple key portions stored in different locations. This transforms the security model from defending against single-key compromise to requiring simultaneous compromise of multiple distributed key portions, dramatically increasing resistance to brute-force and other cracking attacks.
3Device complexity
If same type of data is always stored in one manner, then device complexity is reduced, but adaptability is worsened
Solution Approach 1:
The system dynamically adjusts encryption strategies based on data sensitivity levels. Different data fields can have different risk control levels assigned, allowing the encryption approach (such as key division into different numbers of portions) to adapt automatically to the specific security requirements of each data type, thereby achieving both simplicity and adaptability.
Data Source
AI summary
Disclosed is a method of encrypted storage of data, applied to a client having an application (APP) installed thereon. The method includes: generating an encryption key based on a preset algorithm; dividing the encryption key into m portions, and respectively storing the portions in m media of the client, where m is a natural number greater than 1; and encrypting target data by using the encryption key.