Primary Device Data Encryption Using Secondary DRM Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for securing cached user data on devices often compromise between security and convenience, with frequent re-authentication requirements becoming inconvenient, especially on devices lacking dedicated input methods, leading to potential data exposure and the use of insecure authentication methods.
Innovation Solution
Implementing a cryptographic system that uses keys from a secondary device to encrypt user data on a primary device, leveraging existing DRM protection schemes like HDCP to ensure secure data protection even when the primary device is stolen or used without the secondary device, by generating and regenerating local keys for decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user data is encrypted using user-provided entropy (password, passcode), then security is improved, but convenience deteriorates due to frequent re-authentication requirements
Solution Approach 1:
The authentication system is segmented into two parts: a first authentication method (e.g., biometric) that provides convenient automatic authentication, and a second authentication method (password) that provides strong security. The system uses the convenient first method for regular access while falling back to the secure second method when security is compromised, thus resolving the contradiction between convenience and security.
2Reliability
If frequent re-authentication is enforced, then security is improved, but user experience deteriorates
Solution Approach 1:
The authentication requirement dynamically adjusts based on the authentication method used. When a secure biometric authentication is performed, the system grants extended access without requiring frequent re-authentication. The system only enforces frequent re-authentication when less secure methods are used or when security is compromised, thus maintaining security while improving user experience and application performance.
3Ease of operation
If simple authentication methods are used, then convenience is improved, but security deteriorates due to exposure risks
Solution Approach 1:
The system introduces an intermediary security layer that monitors authentication attempts and data access patterns. When simple authentication methods are used, the intermediary security layer detects potential exposure risks and triggers additional security measures such as requiring password confirmation or switching to more secure authentication methods, thus maintaining convenience while preventing security deterioration.
Data Source
AI summary
Some embodiments provide convenient auto-authentication for user data on a primary device, while still providing a significant level of security, by taking advantage of existing security and cryptographic measures used to communicate with a secondary device. The primary device of some embodiments encrypts the user data on the primary device using a cryptographic key based on a set of keys received from the secondary device. In some embodiments, the primary device encrypts authentication data, or a local key generated from the authentication data, using a remote key received from the secondary device, and encrypts the user data with the local key. In some embodiments, the keys received from the secondary device are an existing set of keys for establishing an encrypted channel of communication for transmitting digital rights management (DRM) protected content according to a DRM protection scheme.