Remote Electronic Device Remediation via Key Escrow

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for securing data on electronic devices, such as laptops, are limited by the complexity and cost of data encryption, especially when devices are outside the internal network, and there is a need for efficient remediation in case of potential compromise.

Innovation Solution

A system and method for remotely managing electronic devices, allowing users to initiate remediation policies, including deleting encryption keys, disabling functionality, and transmitting data, through a management service that detects potential misappropriation and sends instructions to the device for secure data protection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data encryption is implemented to secure data on electronic devices, then security is improved, but device complexity and cost increase

Engineering Contradiction:
Improvedata securityVSAvoidencryption system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements key escrow functionality that is pre-configured on the electronic device before data encryption occurs. This preliminary setup allows the key management infrastructure to be in place beforehand, eliminating the need for complex real-time key generation and management systems during actual data protection operations.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces a key escrow system that acts as an intermediary between the encryption keys and the data. Instead of directly managing complex encryption keys on the device, the system uses the escrow mechanism to store and manage keys remotely, simplifying the device's security architecture while maintaining strong encryption.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If automated key escrow systems are used to manage encryption keys, then key management is improved, but the system fails when electronic devices are outside the internal network

Engineering Contradiction:
Improvekey management reliabilityVSAvoidnetwork accessibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent pre-configures the key escrow functionality directly on the electronic device, allowing it to operate autonomously when disconnected from the network. The device can perform key management operations locally using the pre-loaded escrow system, and only needs network connectivity when voluntary key retrieval is required.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The electronic device is equipped with self-contained key escrow capabilities that allow it to manage its own encryption keys without continuous external assistance. The device can independently perform key operations and only contacts the key escrow system when the user explicitly requests key retrieval, making the system adaptable to offline scenarios.

Inventive Principle:
Principle #25Self-service

3Reliability

If remediation is immediately initiated for potentially compromised devices, then security response is improved, but computational efforts and data transfer increase

Engineering Contradiction:
Improvesecurity response effectivenessVSAvoidcomputational resource consumption
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent implements a staged remediation approach where the severity of the compromise determines the extent of remediation actions. For suspected compromises, less intensive measures are taken first, and only if indicators confirm actual compromise does full remediation execute. This partial action approach reduces unnecessary computational overhead while maintaining security effectiveness.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The system continuously monitors device status and adjusts remediation intensity based on feedback from security indicators. When compromise indicators are detected, remediation actions are triggered at an appropriate level, and the system adapts its response based on the evolving security situation, optimizing resource consumption while maintaining effective security response.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP2409257B1Mitigations for potentially compromised electronic devices
Publication Date: 2020.01.01 MICROSOFT TECHNOLOGY LICENSING LLC
  • EP2409257B1 patent drawingFigure 1
  • EP2409257B1 patent drawingFigure 2
  • EP2409257B1 patent drawingFigure 3~4

AI summary

An electronic device may be reported as potentially compromised (e.g., by a user or by the electronic device itself). An instruction to initiate remediation of the electronic device may be queued. Upon reaching the end of the queue, the instruction is transmitted to the electronic device to initiate remediation of the electronic device. The instruction is received by the electronic device. The remediation policy is performed, which may include performing operations such as deleting an encryption key, deleting data, disabling a login capability, disabling a boot up functionality, disabling a function associated with the electronic device, transmitting data from the electronic device, transmitting a message from the electronic device, or generating information that indicates of a user of the electronic device.