Secure Data Processing Server with External Non-Volatile Memory
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge lies in securely storing and processing raw data from multiple data sources while ensuring the data owner maintains control over the data's location and usage, as existing systems risk revealing business secrets and losing control when data is exchanged with third parties.
Innovation Solution
A system comprising a server with volatile memory and external non-volatile memory, where each data source generates a unique participant key for secure data transmission, encryption, and storage, ensuring that only the data owner can decrypt the data, with no permanent storage on the server and secure key management through a keychain server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is exchanged with third parties for combined analysis, then data utility and monetization potential are improved, but data owner control and security are worsened
Solution Approach 1:
The system segments data access control by implementing fine-grained permission settings that allow data owners to divide control into different levels (read-only, read-write, processing permissions) and assign them selectively to different third parties or analysis purposes, enabling versatile data usage while maintaining precise control over each segment of data access
Solution Approach 2:
The system implements dynamic control mechanisms where data owners can modify, revoke, or update access permissions at any time during the data sharing process, allowing control parameters to change dynamically based on evolving business needs while maintaining continuous data utility for authorized parties
2Reliability
If data is stored on external non-volatile memory for secure processing, then data security is improved, but system complexity is worsened
Solution Approach 1:
The system introduces a security module as an intermediary component that mediates between the data processing unit and external non-volatile memory, managing encryption keys, access permissions, and secure storage operations centrally, thereby simplifying the overall system architecture while maintaining high security standards through specialized dedicated functionality
3Reliability
If data is encrypted with unique data encryption keys for each data source, then data security and owner control are improved, but processing complexity and time are worsened
Solution Approach 1:
The system performs preliminary encryption of data before storage in external non-volatile memory using unique data encryption keys specific to each data source, so that when data is retrieved for processing, it is already in a secure state and only requires decryption during actual processing operations, reducing the time overhead during frequent access operations
Solution Approach 2:
The system dynamically adjusts encryption and decryption parameters based on data types, access patterns, and processing requirements, optimizing the balance between security strength and processing speed by applying stronger encryption only where necessary while using faster algorithms for routine operations
Data Source
Figure 1
Figure 2
AI summary
Described and claimed is a system for securely storing and processing raw data from a plurality of different data sources. The system comprises a server with a processing unit and volatile memory, an external non-volatile memory connected to the server and a plurality of data sources. The server is adapted for encrypting raw data received from each data source of the plurality of data sources and storing the encrypted raw data on the external non-volatile memory, retrieving and decrypting encrypted raw data stored on the at least one external non-volatile memory and processing raw data retrieved from the at least one external non-volatile memory. Further, a corresponding server and a method for securely storing and processing raw data from a plurality of different data sources are described and claimed.