Nested Encryption for Secure Cloud Data Synchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data synchronization methods in cloud storage services often compromise data integrity due to unauthorized access, as data is transmitted unencrypted between local and cloud storage, allowing malicious parties to intercept and decrypt sensitive information.
Innovation Solution
A method involving a user device that encrypts files using a file symmetric key and a first encryption algorithm, then re-encrypts them with a synchronization key and a second encryption algorithm, while also encrypting metadata, to ensure secure transmission and storage, using different encryption algorithms and keys to prevent unauthorized decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is transmitted unencrypted between local and cloud storage, then transmission speed and resource efficiency are improved, but data security and integrity deteriorate allowing unauthorized access
Solution Approach 1:
The system performs preliminary encryption of files using a file symmetric key before transmission to cloud storage. This advance protective action ensures data is secured before entering the transmission channel, preventing unauthorized access while maintaining efficient transmission of already-encrypted data.
Solution Approach 2:
The patent implements nested encryption where a file symmetric key encrypts the file content, and then a synchronization key encrypts the file symmetric key. This multi-layer nested structure provides robust security while allowing efficient decryption by first decrypting the outer synchronization layer and then the inner file layer.
2Reliability
If multiple encryption algorithms and keys are used for file and metadata, then data security is improved, but computational complexity and processing time increase
Solution Approach 1:
The encryption system is segmented into distinct components: a file symmetric key for encrypting file content, a synchronization key for encrypting the file symmetric key and metadata, and different encryption algorithms for different data types. This segmentation allows each component to be optimized independently and simplifies the overall management of encryption operations.
Solution Approach 2:
Different encryption algorithms are applied to different parts of the data based on their specific requirements. The patent uses a first encryption algorithm for the file content and a second encryption algorithm for metadata, with each algorithm selected and configured to provide appropriate security for its specific data type while optimizing processing efficiency.
Data Source
AI summary
A method including configuring, by an infrastructure device, a first user device to select an encryption key, from among a plurality of encryption keys available to the first user device, for encrypting a metadata key that is utilized to encrypt metadata associated with a file; receiving, by the infrastructure device from the first user device, an encrypted metadata key; transmitting, by the infrastructure device to a second user device, the encrypted metadata key; and configuring, by the infrastructure device, the second user device to select a decryption key, from among a plurality of decryption keys available to the second user device, for decrypting the encrypted metadata key, the decryption key being associated with the encryption key is disclosed. Various other aspects are contemplated.