Remote Data Storage via Encrypted File Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current remote data storage methods rely on trust-based approaches, leaving users vulnerable to data security and integrity issues, as they lack control over data location, security mechanisms, and potential government access, especially for sensitive information.
Innovation Solution
A method that splits data files into encrypted partial files, distributes them across multiple remote storage locations, and stores decryption information on the client computer, ensuring enhanced security and user control over data storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored in plain, non-encrypted format for ease of access, then ease of operation is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent divides the encryption key into multiple key fragments and distributes them across different storage locations. The data remains encrypted at all times, but authorized users can reconstruct the key by collecting sufficient fragments, thus maintaining both security and accessibility without requiring plain text storage.
2Ease of operation
If encryption keys are stored with the data for easy decryption, then ease of operation is improved, but security against intrusion deteriorates
Solution Approach 1:
The encryption key is segmented into multiple fragments stored at different locations. Decryption requires collecting a threshold number of fragments, which are themselves protected. This eliminates the need to store complete keys with data while enabling convenient decryption for authorized users who possess the required fragments.
Solution Approach 2:
The patent introduces key fragments as intermediaries between the encryption key and the data. These fragments act as a mediator that enables controlled access - they are easier to protect than complete keys but still provide the functional capability for decryption when sufficient fragments are gathered by authorized parties.
3Ease of operation
If service providers store complete encryption keys for customer data, then ease of operation is improved, but reliability of data security deteriorates
Solution Approach 1:
The patent segments encryption keys into distributed fragments that no single service provider possesses in complete form. Each provider stores only partial key information, making it impossible for any individual provider to compromise customer data security, while collectively they still enable authorized decryption through fragment aggregation.
Solution Approach 2:
Different service providers store different key fragments with varying security properties. The system assigns different security characteristics to different storage locations, allowing critical data to be protected by fragments stored at locations with higher security measures, while less critical operations can use more accessible storage.
4Device complexity
If data is stored in single location for simplicity, then device complexity is reduced, but reliability against data loss deteriorates
Solution Approach 1:
The patent divides data into multiple segments stored at different locations, with each segment encrypted using key fragments. This segmentation provides redundancy - if some storage locations fail, the data can still be reconstructed from remaining segments and key fragments, enhancing reliability without requiring a complex distributed storage system.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for remotely storing data is provided. The method comprises providing a first data file on a client computer; splitting, on the client computer, the first data file into at least two partial files; encrypting the at least two partial files with an encryption algorithm; distributing the at least two encrypted partial files in at least two remote storage locations; storing information about the at least two storage locations of the at least two encrypted partial files for a later retrieval of the at least two encrypted partial files; and storing decryption information for the decryption of the at least two encrypted partial files on the client computer. Further, a computer software product adapted for executing, when run on a computer, a method for remotely storing data is provided, and a client computer for executing the method for remotely storing data.