Secure Data Synchronization via Segmented Storage and Key Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data synchronization techniques incur high costs due to secure storage requirements and fail to control access based on device functionalities, leading to unnecessary data synchronization across devices.
Innovation Solution
Implementing a method to store encrypted data in low-cost storage and security keys in high-cost storage, while controlling access using application identifiers and device permissions, ensuring that only authorized devices can access and decrypt the data, and synchronizing enterprise data only to devices with appropriate permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in high security storage to ensure data protection, then data security is improved, but storage cost increases
Solution Approach 1:
The patent segments data into two components: encrypted data and decryption keys. Encrypted data is stored in low-cost storage, while decryption keys are stored in high-security storage. This segmentation allows the system to maintain data security through key protection while reducing overall storage costs by storing the bulk encrypted data in cheaper storage media.
Solution Approach 2:
The patent introduces encryption as an intermediary mechanism between the data and storage systems. By encrypting data before storage, the system can store data in low-security, low-cost storage while maintaining security through the encryption layer. The decryption keys act as intermediaries that control access to the encrypted data.
2Ease of operation
If data is synchronized to all devices to ensure data accessibility, then data accessibility is improved, but data security control deteriorates
Solution Approach 1:
The patent applies local quality by associating specific decryption keys with specific devices or applications. Each device receives only the keys necessary for its authorized functions, rather than having universal access to all data. This allows data to be accessible to multiple devices while maintaining differentiated security controls appropriate to each device's authorization level.
Solution Approach 2:
The patent implements dynamic key distribution where decryption keys are allocated and revoked based on current device authorization status. When device permissions change, the system dynamically adjusts which keys are available to which devices, enabling flexible security control that adapts to changing accessibility requirements.
Data Source
AI summary
Techniques for secure data synchronization are described. In one or more implementations, a determination is made as to whether enterprise data is stored locally on a first device corresponding to an enterprise device. Based on a determination that the second device is a non-enterprise device, a determination is made as to whether a permission associated with the first device indicates that the first device is permitted to propagate the enterprise data to non-enterprise devices. If the first device lacks permission to propagate the enterprise data to non-enterprise devices, the enterprise data is prevented from being propagated to the second device.