Stateless Data Sharing via Endpoint Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data storage services often fail to protect stored data from unauthorized access, leading to compromised integrity and inefficient resource utilization due to the need to manage unencrypted data, even when third parties gain access.
Innovation Solution
A stateless system with a client application on user devices enables encryption and decryption of data without accessing unencrypted content, using asymmetric key pairs and sharing links with static and dynamic portions to manage access to encrypted content, allowing authorized access without exposing unencrypted data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored in unencrypted format for easy access, then ease of operation is improved, but security and data integrity deteriorate due to unauthorized access risks
Solution Approach 1:
The patent introduces an endpoint server as an intermediary between the client device and the stored encrypted content. The endpoint manages decryption keys and coordinates access requests, allowing easy data retrieval while maintaining security through controlled key management and authentication mechanisms
Solution Approach 2:
The system segments the data access process into multiple components: encrypted content storage, key management at the endpoint, and controlled decryption. This segmentation allows the content to remain encrypted at rest while enabling efficient access through the coordinated action of separate system components
2Reliability
If data is encrypted to protect security, then reliability is improved, but device complexity increases due to encryption management requirements
Solution Approach 1:
The patent extracts the complex encryption management functions from the client device and places them at the endpoint server. The client device only needs to store encrypted content and share access links, while the endpoint handles key management, authentication, and decryption coordination, significantly reducing client-side complexity
Solution Approach 2:
The system implements self-service through automated key management and access control mechanisms. The endpoint automatically manages decryption keys and authentication, eliminating the need for users to manually handle cryptographic operations while maintaining strong security
3Productivity
If third parties gain access to unencrypted data, then resource utilization efficiency deteriorates due to compromised integrity, but data accessibility is improved
Solution Approach 1:
The patent applies preliminary anti-action by encrypting data before storage and implementing access control mechanisms in advance. Even if unauthorized access occurs, the encrypted content remains protected, and the system can detect and respond to access attempts through the endpoint's key management and authentication processes
Data Source
AI summary
A method including receiving, by a receiving device from a transmitting device, a sharing link to be utilized by the receiving device to obtain access to encrypted content that is stored in a storage device, the sharing link including static portion information to enable the receiving device to reach the storage device and dynamic portion information including an identifier that uniquely identifies the receiving device; transmitting, by the receiving device to the storage device based at least in part on utilizing the static portion information, a request to access the encrypted content; and receiving, by the receiving device from the storage device, access to the encrypted content based at least in part on transmitting the request is disclosed. Various other aspects are contemplated.