Encrypted Sensor Data Access Using Split-Key Video Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users desire to access sensor data captured by a sensor while preventing unauthorized access by the sensor and/or other compute devices, such as a central party or liaison, which may have access to the sensor data.
Innovation Solution
A method and apparatus that utilize encrypted keys and authorization checks to ensure only authorized user compute devices can access encrypted sensor data, using organization-wide shared private keys and cryptographic techniques to distribute and decrypt keys, while preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the sensor and liaison compute device have access to sensor data for collection and distribution, then the data can be efficiently gathered and provided to users, but unauthorized access and security breaches occur
Solution Approach 1:
The encryption key is segmented into two parts: a private key held by the sensor and a public key held by the liaison compute device. This segmentation allows the liaison to encrypt data without having access to the decryption key, enabling efficient data distribution while maintaining security against unauthorized access.
Solution Approach 2:
The liaison compute device acts as an intermediary that receives encrypted sensor data from the sensor and re-encrypts it with a media key before distribution to user compute devices. This intermediary role enables efficient data collection and distribution while the cryptographic protocol ensures that neither the liaison nor the sensor can access the plaintext data.
2Reliability
If encryption is applied to sensor data to prevent unauthorized access, then data security is improved, but the complexity of key management and decryption processes increases
Solution Approach 1:
The sensor establishes a cryptographic relationship with the liaison compute device in advance, where the liaison provides the public key to the sensor. This preliminary action enables the sensor to encrypt data immediately without requiring complex real-time key management, simplifying the overall system while maintaining security.
Solution Approach 2:
The sensor autonomously encrypts its data using the public key received from the liaison, and the liaison autonomously re-encrypts the data using a media key. This self-service approach eliminates the need for centralized key management infrastructure, reducing system complexity while maintaining strong security through cryptographic protocols.
Data Source
AI summary
In an embodiment, a method includes receiving, from a compute device associated with (1) an organization and (2) a user account that is associated with the organization, a request for sensor data captured by a sensor. The method further includes sending, to the compute device, an encrypted private key generated by encrypting a private key associated with the organization using an identifier key, to cause the compute device to decrypt the encrypted private key using the identifier key to obtain the private key after receiving the encrypted private key. The method further includes sending, to the compute device, an encrypted media key generated by encrypting a media key using a public key associated with the organization, to cause the compute device to decrypt the encrypted media key using the private key to obtain the media key after receiving the encrypted media key.