Quantum Key Generation for Secure Hybrid Cloud Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cloud storage methods lack secure data management and portability, relying on cloud providers for data security and storage, and fail to utilize quantum event-based encryption and flexible storage policy rules for secure data storage across hybrid environments.
Innovation Solution
A system employing quantum event-based binary data generation for creating cryptographic keys, combined with single-party or two-party symmetric and asymmetric key encryption, and flexible storage policy rules for secure data storage and retrieval across private, public, and hybrid cloud environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is stored in public cloud using traditional encryption methods, then storage capacity and accessibility are improved, but data security and control are worsened due to dependency on cloud providers
Solution Approach 1:
The system segments data into multiple encrypted shares that are distributed across different storage locations. No single location contains the complete data, requiring collaboration of multiple parties to reconstruct the original information. This segmentation provides both accessibility (data can be retrieved from distributed locations) and security (no single point of compromise).
Solution Approach 2:
The patent introduces quantum-generated random numbers as an intermediary element that mediates between the user and cloud storage providers. These quantum random numbers serve as cryptographic keys that the user fully controls, acting as a trusted intermediary that enables secure access without requiring the cloud provider to have access to the decryption keys.
2Ease of operation
If cloud providers manage data security, then operational complexity for users is reduced, but control and portability of encryption are worsened
Solution Approach 1:
The system enables users to perform self-service encryption and key management using quantum random number generation. Users independently generate their own cryptographic keys without relying on cloud provider services, maintaining full control over their data while keeping the interface simple through automated quantum key generation and management.
Solution Approach 2:
The quantum-generated random numbers serve multiple functions: they act as cryptographic keys for encryption, as identifiers for data retrieval, and as portable credentials that work across different storage providers. This multi-functionality enables encryption portability while maintaining ease of operation through a unified approach.
3Productivity
If virtualized environments are used for cloud storage, then resource scalability is improved, but security vulnerabilities are worsened due to increased attack surface
Solution Approach 1:
The patent extracts the cryptographic key generation and management functions from the virtualized cloud environment and places them in the user's control through quantum random number generation. By taking out the most critical security function (key management) from the vulnerable virtualized layer, the system maintains the scalability benefits of virtualization while eliminating the security vulnerabilities associated with key management in virtualized environments.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Ensures secure, portable, and transparent data storage and retrieval, providing full control over encryption and storage, independent of cloud providers, and enabling data to be stored in multiple locations based on various policy rules.
Implementation Method 1
an apparatus for generating random binary data using quantum events
Data Source
AI summary
A system, method and apparatus that uses a quantum event-based, binary data generation apparatus operating in combination with a single-party or two-party, symmetric and/or asymmetric key storage system to create both random numbers and encryption keys to be used for purposes of encryption and decryption of a user's or organization's file data.