Modified AES Key Expansion for Customer Due Diligence Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The vulnerability of using a single initial key in the Advanced Encryption Standard (AES) poses a security risk, as it compromises the integrity of encrypted data if the key is compromised.
Innovation Solution
Implementing a modified key expansion schedule that requires multiple different cipher keys, with one key stored by the service provider and another at the client device, enhancing security by ensuring that no single entity can decrypt the encrypted information without both keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single initial key is used in AES encryption, then the encryption process is simple and efficient, but the security is compromised if the key is obtained by a bad actor
Solution Approach 1:
The encryption key is segmented into multiple component keys (first set of component keys and second set of component keys) that are stored separately in different locations (service provider system and customer device respectively). These segmented keys are combined during the encryption process to form the initial key, ensuring that no single entity possesses the complete key, thus resolving the contradiction between simplicity and security.
2Reliability
If multiple different cipher keys are required for encryption, then data security is enhanced, but the encryption process becomes more complex
Solution Approach 1:
The component keys are generated and stored in advance in separate locations before the actual encryption operation. The service provider system stores the first set of component keys while the customer device stores the second set. This preliminary distribution of key components allows the encryption process to remain relatively simple while achieving enhanced security through the use of multiple keys.
Solution Approach 2:
The component keys act as intermediaries between the service provider and the customer. Instead of requiring direct exchange of a single complete key, the system uses multiple component keys that must be combined to achieve decryption, creating an intermediary layer that enhances security while managing the complexity of key distribution.
3Productivity
If the service provider stores the initial cypher key, then encryption operations can be performed efficiently, but the service provider itself cannot decrypt encrypted information without customer authentication
Solution Approach 1:
The initial key is segmented into component keys distributed between the service provider system and customer device. The service provider system stores component keys that enable efficient encryption operations, but cannot decrypt data alone. The customer device holds the remaining component keys necessary for decryption, ensuring that even with authentication, the service provider cannot access customer data without the customer's participation.
Data Source
AI summary
Systems and methods to encrypt centralized information associated with users of a customer due diligence platform based on a modified key expansion schedule are disclosed. Exemplary implementations may: obtain user profile information making up user profiles of users of a customer due diligence platform; encrypt the user profile information to generate encrypted user profile information based on a modified key expansion schedule requiring multiple different keys; effectuate storage of the encrypted user profile information in association with the user profiles in non-transitory electronic storage; and/or perform other operations.