Secure Key Rotation System for Payment Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic payment systems face disruptions during key rotation and re-keying processes, as they require suspension of business operations to decrypt and re-encrypt credit card data, leading to inefficiencies and downtime.
Innovation Solution
A system that allows key rotation and re-keying to occur while maintaining transaction operations by decrypting and re-encrypting data using the latest two data encryption keys stored in memory, ensuring continuous business functionality during the process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If key rotation and re-keying are performed by decrypting and re-encrypting all stored credit card data, then data security is improved, but business operations are disrupted and productivity decreases
Solution Approach 1:
The system performs preliminary actions by maintaining multiple encryption keys in the database (current key and next key) before rotation is needed. When key rotation is initiated, the system has already prepared the next key and can switch to it without disrupting operations. This allows the system to perform the security update in advance or without interruption to business operations.
Solution Approach 2:
The patent introduces an intermediary mechanism by using a dual-key system where both the current encryption key and the next encryption key are maintained simultaneously. During transition, the system uses an intermediary state where new keys are generated and stored alongside old keys, allowing seamless switching without requiring all data to be re-encrypted during active operations.
2Reliability
If all encrypted data is re-keyed during key rotation, then encryption security is strengthened, but system complexity and processing time increase
Solution Approach 1:
The system performs preliminary key generation and storage actions before rotation is needed. Multiple encryption keys are maintained in the database in advance, so when rotation occurs, the system simply switches to the pre-prepared next key rather than generating and distributing new keys system-wide, reducing processing complexity.
Solution Approach 2:
The patent segments the key management system by separating the current encryption key from the next encryption key, allowing independent management and rotation of each. This segmentation enables the system to rotate keys at the database level without requiring system-wide re-encryption, reducing overall processing complexity.
3Reliability
If key rotation suspends business operations for data re-encryption, then data security is enhanced, but loss of time and operational efficiency worsen
Solution Approach 1:
The system performs preliminary actions by pre-generating and storing multiple encryption keys in the database before rotation is needed. This allows the key rotation to be executed quickly by simply switching to the pre-prepared next key, minimizing operational downtime while still enhancing security through regular key rotation.
Solution Approach 2:
The patent enables continuity of useful action by allowing business operations to continue uninterrupted during key rotation. The dual-key system in the database ensures that encryption/decryption operations can continue using the current key while the system transitions to the next key in the background, maintaining continuous operational functionality.
Data Source
AI summary
This invention discloses a novel system for securing and using payment token data in a system for processing electronic payment transactions that does not require down-time for rekeying encryption keys when the keys are rotated.