Partitioned Cryptographic Storage for Granular Data Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems face challenges in securely sharing encrypted confidential data, as they require secure transmission of symmetric keys and lack control over access and dissemination.
Innovation Solution
Data is partitioned into crypto buckets, encrypted with different keys, and metadata is generated for each store, stored in a searchable database, allowing controlled sharing and access through a central system that manages secure connections and authenticated access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric key encryption is used to secure data, then data confidentiality is improved, but key sharing and access control become problematic
Solution Approach 1:
The patent divides data into multiple partitions and encrypts each partition with a different key. This segmentation allows selective sharing of specific data partitions with different recipients without requiring all parties to have access to all keys, thus maintaining confidentiality while simplifying key management.
Solution Approach 2:
The patent introduces a trusted third-party service that manages key distribution and access control. This intermediary handles the complex key sharing operations, allowing users to share encrypted data without directly exchanging sensitive keys, thereby improving ease of operation while maintaining security.
2Reliability
If symmetric key encryption is used to secure data, then data confidentiality is improved, but control over access and dissemination is lost
Solution Approach 1:
By segmenting data into encrypted partitions with different keys, the system enables granular access control where different users or groups can be granted access to specific partitions based on their needs, maintaining both confidentiality and adaptability.
Solution Approach 2:
The patent implements dynamic access control where encryption keys can be rotated, revoked, or updated without re-encrypting the entire dataset. This allows the system to adapt to changing access requirements while maintaining data confidentiality.
3Adaptability or versatility
If data is encrypted with multiple keys for sharing, then access control is improved, but system complexity increases
Solution Approach 1:
The trusted third-party service acts as an intermediary that manages the complexity of multiple encryption keys, key distribution, and access control policies. This externalizes the complexity management, allowing the core system to maintain adaptability without bearing the full burden of system complexity.
Solution Approach 2:
The patent uses cryptographic hashes and metadata to create verifiable copies of data integrity information without copying the actual sensitive data. This allows for efficient access control verification without duplicating complex encryption mechanisms.
Data Source
AI summary
The present application concerns a method and a system of storing one or more service data items. To store and share in particular confidential data, the one or more service data items are partitioned into one or more data stores. The one or more data stores are stored. Metadata of the one or more data stores is generated and the metadata is stored in a metadata database.