Secure Deferred File Decryption via Password Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data processing systems face challenges in securely deferring the decryption of encrypted files that can only be decrypted by designated operators, as the operator may not be present at the time of processing, leading to unpredictable delays or inability to decrypt the files.
Innovation Solution
A system and method that involves receiving and storing encrypted files, generating a data package with the decryption password, encrypting it with a password protection key, and storing it for later decryption when the system is ready to process, using a delivery key pair and password protection mechanisms to ensure secure and timely decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If the encrypted file is decrypted immediately upon submission by the designated operator, then the file can be processed without delay, but the operator must be present at the time of processing which is not always possible and compromises system automation
Solution Approach 1:
The system performs preliminary actions by securely storing the encrypted file and the decryption password separately in persistent storage before the actual processing time. When processing is needed, the system retrieves both components and performs decryption automatically without requiring the operator's presence, thus eliminating delays while maintaining automation.
Solution Approach 2:
The system introduces an intermediary mechanism - a secure storage system that holds both the encrypted file and its decryption password. This intermediary allows the file to be decrypted at any time by retrieving the stored password, bridging the gap between file submission and processing without requiring immediate operator involvement.
2Extent of automation
If the decryption password is stored securely for later retrieval, then the system can automatically decrypt files without operator presence, but additional security mechanisms and storage systems are required increasing system complexity
Solution Approach 1:
The system segments the decryption process into separate components: the encrypted file is stored in one location and the decryption password is stored in another location within persistent storage. This segmentation allows independent retrieval and processing, enabling automatic decryption while maintaining a relatively simple system structure.
Solution Approach 2:
The system implements self-service by automatically retrieving the stored decryption password and using it to decrypt the file without human intervention. The previously stored password serves the system itself, enabling autonomous operation and reducing the need for complex security management infrastructure.
3Reliability
If the file is encrypted with a public key for secure transmission, then the file can be securely transmitted and stored, but the decryption requires the corresponding private key which must be protected by a password known only to designated operators
Solution Approach 1:
The system performs preliminary action by securely obtaining and storing the private key password in persistent storage before the decryption is needed. This preliminary secure storage maintains the high security standards of public key cryptography while enabling easy access during decryption by retrieving the pre-stored password.
Solution Approach 2:
The system introduces an intermediary - the securely stored password in persistent storage - that mediates between the encrypted file and the private key. This intermediary maintains the security requirements of public key cryptography while enabling automated decryption by providing the password when needed without requiring operator presence.
Data Source
AI summary
A method is provided that permits user to submit a password to the private key that is to be used to decrypt files either at the time of user account setup or at the time of submitting the files. The password is stored securely in the system, permanently or temporarily, and is used later to decrypt the files right before the system is ready to process the files.