Multi-Value Encryption Data Protection System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data protection methods rely on stored security codes, which are vulnerable to hacking and theft, compromising the security of sensitive information.
Innovation Solution
A method and system utilizing three types of security codes: user-inputted user value, device-related device value, and server-generated server value, where none of the security codes are stored on the user-end device, employing a symmetric encryption-decryption process and a key server to generate and manage these values for high-level data protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If security codes are stored on the user-end device, then data protection is simplified and access is convenient, but the security code becomes vulnerable to hacking and theft
Solution Approach 1:
The patent extracts the security code storage function from the user-end device and relocates it to a secure server. The user device only retains the ability to generate and transmit authentication requests, while the actual security codes are generated, stored, and managed exclusively on the server side, eliminating the security vulnerability of local storage while maintaining access convenience.
Solution Approach 2:
The patent introduces a server as an intermediary between the user device and the protected data. The server acts as a mediator that generates security codes, verifies user authentication, and controls data access without requiring the user device to store sensitive security information. This intermediary architecture resolves the contradiction by centralizing security management.
2Reliability
If multiple security codes (user value, device value, server value) are used, then data security is significantly enhanced, but the system complexity increases
Solution Approach 1:
The patent merges the generation and management of multiple security codes (user value, device value, server value) into a unified server-based system. Instead of implementing separate security mechanisms in the user device, all three security codes are generated and coordinated through the server, which simplifies the user device architecture while maintaining multi-layered security.
Solution Approach 2:
The server performs self-service by automatically generating all necessary security codes, managing their distribution, and handling verification processes without requiring complex client-side security implementations. The user device simply needs to communicate authentication requests, and the server handles the complex security logic independently.
Data Source
AI summary
The disclosure relates to a method and a system for data protection. The system provides a key server and a software sequence executed in a user device. The software sequence renders the method. In the method, a user value associated with a user's registered data in the key server is provided according to the user's input data; a server value is generated by the key server when the key server identifies the user; and a device value is generated according to the hardware information of the user device. The data in the user device can be effectively protected by an encryption process using the user value, the server value and the device value. A data protection mechanism with high-level security can be achieved when the data is protected in the encryption process incorporating the user-related user value, the device-related device value, and the server-related server value.