Secure Data Distribution via Key Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in securely storing sensitive information while allowing access for networked transactions without compromising confidentiality, as third-party storage solutions lack secure encryption key management.
Innovation Solution
Implementing a remote network management platform that stores encrypted sensitive information, with decryption keys held only by authorized entities, ensuring that sensitive information remains secure and accessible only to authorized parties.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If sensitive information is stored in a remote network management platform, then storage infrastructure can be outsourced to third parties, but the third party gains access to unencrypted versions which compromises confidentiality
Solution Approach 1:
The patent extracts the decryption keys from the remote network management platform and stores them locally in secure elements within client devices. This separation ensures that while the third party can provide storage infrastructure, they cannot access the actual sensitive information without the keys, thus maintaining confidentiality while enabling outsourcing.
Solution Approach 2:
The system segments the storage and access control functions by storing encrypted data in the remote platform while keeping decryption keys distributed across multiple client devices. This segmentation prevents any single third-party entity from accessing unencrypted sensitive information, resolving the contradiction between outsourcing and confidentiality.
2Ease of operation
If decryption keys are distributed to multiple entities, then access control is improved, but key management complexity increases
Solution Approach 1:
The patent introduces a key management service as an intermediary that handles key distribution, storage, and retrieval operations. This service mediates between the remote storage platform and client devices, simplifying key management complexity while maintaining secure access control through centralized coordination of key operations.
3Object-affected harmful factors
If encrypted data is stored remotely, then data security is improved, but access speed and transaction efficiency decrease
Solution Approach 1:
The patent performs preliminary decryption of data in client devices before transmission to the remote storage platform. By decrypting data locally using stored keys and then storing only encrypted versions remotely, the system maintains fast access speeds while ensuring data security, as the remote platform never holds unencrypted sensitive information.
Data Source
AI summary
In an embodiment, persistent storage contains one or more cryptographic keys. One or more processors may be configured to perform operations comprising: receiving a request for an encrypted record stored within a computational instance, wherein the request includes a plaintext value related to the encrypted record; obtaining a hash value by applying a hash function to the plaintext value; transmitting, to the computational instance, the hash value; receiving, from the computational instance, the encrypted record, wherein the encrypted record includes one or more encrypted values; obtaining an unencrypted version of the encrypted record by applying a cryptographic function to the encrypted record, wherein applying the cryptographic function includes use of a cryptographic key of the one or more cryptographic keys; and transmitting at least part of the unencrypted version of the encrypted record.