Quantum Key Generation for Secure Cloud Data Storage

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current cloud storage methods lack secure data management, as they rely on cloud providers for security and are vulnerable to data breaches, and they do not allow for flexible storage policies across different cloud environments, limiting data portability and security.

Innovation Solution

A system using quantum event-based binary data generation for creating cryptographic keys and symmetric/asymmetric encryption, combined with storage policy rules to securely store and retrieve data across private, public, and hybrid cloud environments, ensuring data portability and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If data is stored in public cloud, then storage capacity and accessibility are improved, but data security and control are worsened

Engineering Contradiction:
Improvestorage accessibilityVSAvoiddata security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent extracts the security control functions from the cloud provider by implementing client-side encryption. The encryption keys are generated and managed exclusively by the client device, removing the provider's ability to access or compromise the data. This allows data to be stored in public cloud infrastructure while maintaining client-controlled security.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces cryptographic encryption as an intermediary layer between the client data and cloud storage. The encryption process transforms readable data into ciphertext that cannot be accessed without the corresponding decryption key, which remains solely on the client device. This intermediary mechanism enables secure storage in public clouds without relying on the provider's security measures.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If cloud providers manage data security, then operational complexity for users is reduced, but security control and portability are limited

Engineering Contradiction:
Improvesecurity managementVSAvoiddata portability
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent implements preliminary encryption action before data is transmitted to the cloud. By encrypting data on the client device prior to upload, the security framework is established in advance, enabling seamless data portability. The encrypted data can be moved between cloud providers without requiring security reconfiguration, as the encryption keys remain with the user throughout the process.

Inventive Principle:
Principle #10Preliminary action

3Ease of manufacture

If traditional encryption methods are used, then implementation simplicity is maintained, but security strength against modern threats is insufficient

Engineering Contradiction:
Improveimplementation simplicityVSAvoidencryption strength
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent changes the cryptographic parameters by implementing encryption algorithms with key lengths of 256 bits or greater, which provides substantially stronger security against modern computational threats while maintaining the same basic encryption workflow. This parameter enhancement strengthens security without complicating the implementation process for users.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11423169B1System, method and apparatus for securely storing data on public networks
Publication Date: 2022.08.23 GOKNOWN LLC
  • US11423169B1 patent drawing
  • US11423169B1 patent drawing
  • US11423169B1 patent drawing

AI summary

A system, method and apparatus that uses a quantum event-based, binary data generation apparatus operating in combination with a single-party or two-party, symmetric and/or asymmetric key storage system to create both random numbers and encryption keys to be used for purposes of encryption and decryption of a user's or organization's file data.