Server Polling Component for Crypto-Erasure Resilience
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data storage systems face security risks due to the potential unauthorized access to local copies of encryption keys stored in volatile memory, especially when disconnected from a network, as existing solutions are ineffective in preventing access during network outages or system reboots.
Innovation Solution
Implementing a server polling component that periodically checks the status of encryption keys with a remote key server, performing a key failure action such as deleting local copies or shutting down the system if the keys become unavailable or disabled, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If local copies of encryption keys are stored in volatile memory for decrypting data, then decryption performance is improved, but security is worsened because an unauthorized party obtaining physical access can read encrypted data
Solution Approach 1:
The system performs preliminary actions by deleting local key copies proactively when network disconnection is detected or after a timeout period, rather than waiting for potential security breaches. This preemptive key removal ensures that even if physical access is obtained during network outages, the encrypted data remains protected.
Solution Approach 2:
The system dynamically adjusts key management behavior based on network status. When connected, keys are cached for performance; when disconnected or timeout occurs, keys are deleted for security. This dynamic adaptation allows the system to optimize between performance and security based on real-time conditions.
2Reliability
If the system periodically polls the key server for key status, then security is improved by detecting disabled keys, but network bandwidth is consumed and system complexity increases
Solution Approach 1:
The system implements periodic polling of the key server at predetermined intervals to check key status. This periodic action ensures that if keys are disabled remotely, the system detects them eventually, maintaining security without requiring continuous monitoring. The polling schedule balances security needs with resource consumption.
3Reliability
If the system deletes local key copies when disconnected from the network, then security is improved, but data accessibility is worsened because decryption cannot occur without keys
Solution Approach 1:
The system prepares for potential security risks by implementing a timeout mechanism that deletes local key copies after a predetermined period of network disconnection. This beforehand cushioning approach accepts temporary data inaccessibility as a trade-off for maintaining security, ensuring that keys are not permanently cached and could be compromised if the device is stolen during extended outages.
Data Source
AI summary
Providing a server polling component for remote cryptographic key erasure resilient to network outage. A set of keys received from a server are stored on data storage. The data storage sends a status request to the server. If a key enabled status is received, the data storage continues normal operations. If a key disabled status is received, a key failure action is performed. The key failure action includes deleting one or more of the keys in the set of keys or shutting down one or more storage devices of the data storage. If no response is received from the server, the data storage iteratively resends the status request at retry time intervals until a response is received from the server or until a time out period expires. On expiration of the time out period, the key failure action is performed.