Secret-Sharing Storage With Centralized Key Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secret sharing systems are expensive due to the need for multiple secret sharing locations and physical random number generators at each user location, and there is a demand for more cost-effective systems with high confidentiality for content protection.
Innovation Solution
A secret sharing-based storage method using a centralized secret sharing location that distributes encrypted data and keys to multiple cloud servers via optical and internet networks, reducing the number of physical locations and using common keys for encryption, with optional double encryption by a proxy server to enhance confidentiality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secret sharing location is provided for each user and physical random number generators are used at each user location, then high confidentiality is achieved, but system cost increases significantly
Solution Approach 1:
Multiple user locations share a common secret sharing location, eliminating the need for separate physical random number generators at each user site. The shared location serves all users, reducing overall system cost while maintaining security through centralized key management and distribution.
Solution Approach 2:
The common secret sharing location performs multiple functions: generating random numbers, creating encryption keys, distributing keys to multiple users, and managing secret sharing for all users. This multi-functional approach eliminates redundant infrastructure while preserving confidentiality.
2Reliability
If expensive encryption devices and physical random number generators are deployed at each user location, then high security is achieved, but system cost increases
Solution Approach 1:
The expensive physical random number generator and encryption device functions are extracted from individual user locations and consolidated into a single common secret sharing location. Users receive encrypted data and keys through secure communication channels, eliminating the need for expensive local hardware while maintaining security.
Solution Approach 2:
The common secret sharing location acts as an intermediary that generates and distributes encryption keys to multiple users. This centralized approach allows secure key management and distribution without requiring each user to possess expensive encryption infrastructure, reducing overall system cost while maintaining security.
3Reliability
If multiple secret sharing locations are provided for each user, then high confidentiality is achieved, but the number of physical locations and system cost increase
Solution Approach 1:
Multiple users share a common secret sharing location, consolidating what would otherwise be separate physical locations into a single facility. This reduces the total number of physical locations required while maintaining confidentiality through centralized secure key management and distribution to all users.
Data Source
AI summary
According to one embodiment, a user location encrypts plain text data with a common key sent from a secret sharing location and sends the encrypted data to the secret sharing location via a network. The secret sharing location generates multiple pieces of key-distributed data, generates multiple pieces of encrypted data distributed data obtained from the encrypted data, and distributes and sends the multiple pieces of key-distributed data and the multiple pieces of encrypted data distributed data to multiple cloud servers via other network. The multiple cloud servers store the received encrypted data distributed data and the corresponding received key-distributed data.