Server-Mediated Access Control for Encrypted Objects
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securing sensitive information stored on devices are inefficient, as they often leave unencrypted objects persistently accessible, consume significant computing resources for repeated authentication, and do not adequately verify device integrity, leading to potential unauthorized access.
Innovation Solution
A system where a device encrypts objects with a key stored on a server, which authenticates users and verifies device trust identifiers, issuing tickets for access that can be repeatedly used, expiring to ensure secure and efficient access management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If objects are encrypted with keys stored on the server, then security is improved, but device complexity increases
Solution Approach 1:
A server acts as an intermediary between the client device and the encrypted objects. The server stores encryption keys and mediates access requests by authenticating users and verifying device trust identifiers before releasing keys. This intermediary approach centralizes key management while maintaining distributed object storage, resolving the contradiction between enhanced security and device complexity.
2Reliability
If repeated authentication is performed for each access request, then security is improved, but computing resources are consumed
Solution Approach 1:
The system performs preliminary authentication and device verification actions before actual object access. By validating user credentials and device trust identifiers in advance at the server level, the system establishes authorization status beforehand. This preliminary action reduces the computational burden during subsequent access requests, as the server can leverage pre-validated authentication states rather than performing full authentication routines for each access event.
3Reliability
If device trust identifiers are verified, then security is improved, but access control complexity increases
Solution Approach 1:
The server serves as an intermediary that handles device trust identifier verification centrally. Rather than implementing complex trust verification logic on each client device, the server receives trust identifiers from devices, validates them against authorized device lists, and makes access control decisions. This intermediary approach simplifies the access control mechanism by centralizing verification logic while maintaining robust device trust assessment.
4Productivity
If tickets are issued for repeated access, then efficiency is improved, but security management complexity increases
Solution Approach 1:
The server acts as an intermediary that manages ticket issuance and validation centrally. Tickets are simple data structures containing authentication information and expiration timestamps. The server generates these tickets after initial authentication and verification, then validates them during subsequent access requests. This intermediary management approach enables efficient repeated access through ticket reuse while keeping security management simple through centralized control and straightforward ticket validation logic.
Data Source
AI summary
A device operated by a user may store an object to which access is to be regulated, which may be achieved by encrypting the object with an encryption key and sending the key to a server having a key store. When a user of the device requests access to the object, the server may authenticate the user (e.g., according to a credential submitted by the user) and verify a trust identifier of the device (e.g., authorization to access the object through the device, and/or the integrity of the device), before sending to the device a ticket granting access to the key. The device may send the ticket to the server, receive the key from the server, decrypt the stored encrypted object, and provide the object to the user. This mechanism promotes rapid access upon request and efficient use of the server, and enables remote revocation of access.