Storage Device ID-Based Content Encryption Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing content encryption methods are vulnerable to unauthorized decryption when the encryption key is leaked or distributed with the encrypted content, especially in mobile storage devices, as they do not effectively prevent decryption even if the encrypted content is copied to an unauthorized storage device.
Innovation Solution
The proposed solution utilizes a storage device's unique ID to generate encryption and decryption keys, ensuring that the keys are specific to the device and cannot be easily replicated, thereby preventing unauthorized access and decryption of the content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a symmetric encryption algorithm is used with a single encryption key, then the encryption and decryption process is simple and efficient, but the security is compromised because the key can be leaked and distributed with the encrypted content, allowing unauthorized decryption
Solution Approach 1:
The patent divides the single encryption key into multiple separate keys: a first encryption key for encrypting content and a second encryption key for decrypting content. This segmentation prevents the encryption key from being leaked with the encrypted content, as each key serves a distinct function and cannot be derived from the other or the content itself.
Solution Approach 2:
The patent introduces a third element - the encrypted content itself - as an intermediary that contains information about the first encryption key but not the second. The legitimate decryption process requires combining the encrypted content with the second encryption key, creating a secure intermediary mechanism that prevents direct access to the decryption key.
2Reliability
If the encryption key is stored separately from the encrypted content, then security is improved by preventing key leakage, but the system complexity increases and requires additional storage and management mechanisms
Solution Approach 1:
The patent merges the key management function with the content storage structure by embedding the first encryption key information within the encrypted content itself. This allows the content to carry its own encryption parameters, eliminating the need for separate key storage mechanisms while maintaining security through the two-key design.
Solution Approach 2:
The encrypted content serves multiple functions: it stores the actual data, embeds the first encryption key information for verification, and provides the necessary parameters for legitimate decryption when combined with the second encryption key. This multi-functionality reduces system complexity by eliminating separate key management components.
3Device complexity
If content is encrypted using a key that can be derived from the encrypted content itself, then the encryption process becomes simpler, but unauthorized devices can potentially decrypt the content by extracting the key from the content
Solution Approach 1:
The patent segments the key derivation process into two independent parts: the first encryption key is embedded in the encrypted content, while the second encryption key is stored separately in the storage device. This segmentation ensures that neither key can be derived from the other or the content, preventing unauthorized decryption while maintaining simple encryption operations.
Solution Approach 2:
The patent creates an asymmetric key relationship where the first and second encryption keys have different functions and cannot be相互推导. The first key is used for encryption and is embedded in content, while the second key is used for decryption and is stored separately. This asymmetric design prevents key extraction and unauthorized decryption while maintaining operational simplicity.
Data Source
AI summary
An apparatus and method for encrypting content based on an identifier (ID) of a storage device and a decrypting apparatus and method corresponding thereto. The content recording device includes a storage device interface to receive a first primitive ID and a second primitive ID to identify first and second portions provided in a storage device from the storage device, and a processor to generate a media ID that is a unique ID of the storage device using the first primitive ID and the second primitive ID and to encrypt one or more contents using an encryption key generated using the media ID, wherein the storage device interface provides the content encrypted by the processor to the storage device.