Third-Party Data Protection with Pre-Transmission CEK Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for protecting sensitive user data are vulnerable to unauthorized access and decryption due to the use of a single entity for encryption and storage, exposure of cleartext data during transmission, and potential unauthorized access by administrators.
Innovation Solution
A system where sensitive user data is encrypted with a content encryption key (CEK) and tagged with a readable tag, transmitted to a database server without a private key, and further processed by a key manager using public-key cryptography to ensure only authorized entities can decrypt the data, with no cleartext exposure during transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sensitive user data is transmitted over a secure connection (TLS), then data transmission security is improved, but cleartext data becomes visible at the start and end of the connection
Solution Approach 1:
The patent applies preliminary action by encrypting the sensitive user data with a content encryption key (CEK) before transmission begins. The data entry system generates encrypted user data and an encrypted version of the CEK using the data exit entity's public key, then transmits these encrypted forms over the secure connection. This preliminary encryption prevents cleartext exposure at the start of the connection while maintaining transmission security.
2Device complexity
If the same entity encrypts and stores sensitive user data, then system complexity is reduced, but security is worsened due to potential unauthorized access by administrators
Solution Approach 1:
The patent applies segmentation by separating the encryption function from the storage function. The data entry system performs encryption using a CEK and the data exit entity's public key, then stores only the encrypted user data and encrypted CEK in the database. The data exit entity alone possesses the private key needed for decryption, while database administrators lack both the private key and the ability to decrypt the data, thus segmenting security roles and preventing unauthorized access.
Solution Approach 2:
The patent introduces an intermediary mechanism through the use of cryptographic keys and encrypted data formats. The encrypted CEK acts as an intermediary that allows the data exit entity to retrieve and decrypt its data without requiring database administrators to have decryption capabilities. This intermediary layer ensures that even if administrators access the database, they cannot obtain the plaintext data or the encryption keys.
3Ease of operation
If cleartext data is transmitted during secure connection establishment, then data accessibility is improved, but data security is worsened due to potential interception
Solution Approach 1:
The patent applies preliminary action by pre-encrypting the sensitive user data with a CEK before the secure connection is established or data transmission begins. The data entry system generates encrypted user data and an encrypted version of the CEK using the data exit entity's public key, then transmits these encrypted forms over the secure connection. This preliminary encryption ensures that even if the connection is intercepted, the data remains inaccessible without the private key.
Data Source
AI summary
Systems and methods for protecting user data received by, stored on, and/or requested by third-party computing devices include a data entry computing system on a first network node. A data entry computing system can include a processing circuit that can identify user-entered data as sensitive user data, generate a content encryption key (CEK), generate encrypted user data by encrypting the sensitive user data with the CEK, tag the encrypted user data and the CEK with a tag readable by a database server on a network node different than the data entry computing system, the tag comprising information indicative of the encrypted user data, and transmit the encrypted user data to the database server, wherein the database server excludes a private key of a key manager on a network node different than the data entry computing system.