Time-Expired Encryption Key Generation for Data Privacy

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing systems lack an efficient method to ensure data accessibility for a limited time period and subsequent inaccessibility, while also securely tracking data access activities, which is crucial for data retention policies and privacy protection.

Innovation Solution

A system comprising a storage unit, a trusted time source, a key generation unit, and an encryption unit generates an encryption key with a time expiration, encrypting data that becomes inaccessible after the expiration time, and utilizes blockchain technology to securely track data access activities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Duration of action of moving object

If data is stored indefinitely without expiration, then data availability is maintained, but data privacy and retention policy compliance deteriorate

Engineering Contradiction:

Improvedata availability periodVSAvoidprivacy risk

Core Design Contradiction:

Duration of action of moving objectVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary actions by embedding expiration metadata and encryption keys at data creation time, and pre-establishing trusted time sources and decryption mechanisms. When expiration is reached, the system can automatically revoke access without manual intervention, thus maintaining privacy compliance while ensuring data availability during the authorized period.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system changes the accessibility parameter of data over time by using time-based encryption key validation. The decryption capability transitions from available to unavailable based on the expiration timestamp, allowing the system to maintain data availability during the retention period while automatically enforcing privacy protection after expiration.

Inventive Principle:

Principle #35Parameter changes

2Object-affected harmful factors

If data access is restricted after expiration, then data privacy is improved, but data accessibility deteriorates

Engineering Contradiction:

Improveunauthorized access riskVSAvoiddata access convenience

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The system implements self-service by automatically managing data access control based on expiration timestamps. The trusted time source and encrypted metadata work together to enable automatic access denial without requiring manual administrative intervention, thus maintaining privacy security while minimizing operational complexity for users.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The system uses feedback from the trusted time source to continuously monitor current time against expiration timestamps. This feedback mechanism automatically adjusts data accessibility based on whether the current time is before or after the expiration point, ensuring privacy protection is maintained while providing seamless access during the authorized period.

Inventive Principle:

Principle #23Feedback

3Reliability

If encryption keys are generated with expiration timestamps, then data security is improved, but system complexity increases

Engineering Contradiction:

Improvedata securityVSAvoidkey management complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system introduces a trusted time source as an intermediary between the encryption system and expiration validation. This intermediary provides authoritative time stamps that both the encryption key generation and decryption processes can verify, thereby enhancing data security through reliable time-based validation while avoiding the complexity of implementing distributed time synchronization or complex key rotation protocols.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11356283B2Data storage using an encryption key with a time expiration associated therewith

Publication Date: 2022.06.07 SEAGATE TECH LLC

AI summary

A system includes a storage unit, a trusted time source, a key generation unit, and an encryption unit. The storage unit is configured to store data. The trusted time source provides a correct time responsive to a request. The key generation unit receives a time expiration associated with the data stored on the storage unit. The time expiration indicates when the data stored on the storage unit is to become inaccessible. The key generation unit further receives the correct time from the trusted time source and generates an encryption key based on the correct time and further based on the time expiration. The encryption unit is configured uses the encryption key to encrypt the data stored on the storage unit. A certificate that includes the time expiration and a decryption key associated with the encryption key is generated responsive to the data stored on the storage unit being encrypted.