Seed-Derived Encryption Keys for Hack-Resistant Data Backup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data security methods are inadequate in preventing data exposure due to server hacking, particularly during backup events.
Innovation Solution
A data encryption method involving a user device that generates a first encryption key using seeds obtained from an external device, allowing for secure data encryption and transmission, with optional secondary encryption by the external device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is stored on external server for backup, then data accessibility and backup functionality are improved, but data security deteriorates due to potential server hacking
Solution Approach 1:
The patent applies preliminary action by encrypting data on the user device before transmission to the external server. The encryption process uses a first seed and a second seed (generated from user input) to create an encryption key that transforms plaintext into ciphertext. This preliminary encryption ensures that even if the server is compromised, the stored data remains indecipherable without the decryption key, thus resolving the security risk while maintaining backup functionality
Solution Approach 2:
The patent introduces an intermediary encryption mechanism between the user device and the external server. Instead of transmitting plaintext directly to the server, the data passes through an encryption layer that uses cryptographic keys derived from seeds. This intermediary encryption layer acts as a protective barrier, allowing the server to store and transmit data without having access to the plaintext, thus resolving the contradiction between backup accessibility and data security
2Object-affected harmful factors
If data is encrypted using multiple keys and seeds, then data security is improved, but processing complexity increases
Solution Approach 1:
The patent applies segmentation by dividing the encryption process into distinct stages: first, a first seed is obtained from an external device; second, a second seed is generated from user input; third, these seeds are combined to generate an encryption key; and finally, the encryption key is used to encrypt the data. This segmented approach allows for systematic key management and makes the complex encryption process more manageable and traceable, reducing perceived complexity while maintaining high security
Solution Approach 2:
The patent uses parameter changes by transforming input parameters (seeds) into different output parameters (encryption keys) through cryptographic functions. The first seed and second seed are processed through key derivation functions that change their form and combine them into a secure encryption key. This parameter transformation approach allows the system to maintain security through multiple derived parameters while managing complexity through standardized cryptographic operations
Data Source
AI summary
Disclosed are a method for a user device to encrypt data and the user device. The method according may comprise: acquiring a first seed from an external device; generating a second seed in response to acquiring the first seed; generating a first encryption key based on the first seed and the second seed; and encrypting data using the first encryption key.