Virtual Zeroisation via Key Overwrite for Secure Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data encryption and key management systems in high-security environments are vulnerable to human error and unauthorized access, especially in cases of device loss, theft, or power failure, as they often require manual or automatic zeroisation, which can be compromised.
Innovation Solution
The implementation of a virtual zeroisation method using an information-theoretically secure cipher with one-time key material, where data is encrypted and the key is overwritten as it is used, eliminating the need for manual or automatic zeroisation and ensuring that the key material cannot be recovered.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual zeroisation is implemented, then key material can be erased when compromised, but the device remains vulnerable to human error and may allow unauthorized access
Solution Approach 1:
The system automatically performs zeroisation of key material when it is no longer needed. The encryption device monitors key usage and autonomously erases key material from storage without requiring manual intervention, thereby eliminating human error while maintaining reliable key erasure.
Solution Approach 2:
The system proactively erases key material as soon as it is no longer required for encryption operations, before any potential compromise can occur. This preliminary action ensures that key material does not remain in storage longer than necessary, reducing the window of vulnerability.
2Ease of operation
If automatic zeroisation is implemented, then key material can be erased without manual intervention, but the device requires power supply connection which may not be available during compromise
Solution Approach 1:
The system extracts and protects key material by encrypting data with it, then removes the key material from storage by overwriting it with encrypted data. This extraction approach ensures that even without power, the key material cannot be recovered because it has already been consumed and erased from storage.
Solution Approach 2:
The system discards key material after use by overwriting the storage locations with encrypted data. This discarding mechanism ensures that key material cannot be recovered even if the device is compromised without power, as the original key material has been permanently replaced.
3Productivity
If fixed length keys are reused for encryption, then encryption operations can be performed, but the key can be recovered by unauthorized parties in case of device loss or theft
Solution Approach 1:
The system uses disposable key material that is generated, used once for encryption, and then immediately erased. Each key is designed for single-use only, eliminating the security risk of key reuse while maintaining encryption efficiency through continuous generation of new key material.
Solution Approach 2:
The system generates and loads key material into storage in advance of needed encryption operations. This preliminary preparation allows efficient encryption operations to proceed while ensuring that key material is already in place and will be automatically erased after use, preventing recovery attacks.
4Ease of operation
If key material is stored in the device, then encryption can be performed, but the stored key material can be accessed by adversaries if the device is compromised
Solution Approach 1:
The system extracts key material from persistent storage as it is used for encryption operations. By continuously removing used key material from storage and replacing it with newly generated key material, the system ensures that adversaries cannot access previously used key material even if they gain physical access to the device.
Solution Approach 2:
The system dynamically manages key material in storage, continuously updating it as encryption operations proceed. This dynamic approach ensures that the key material in storage is always current and will be erased after use, preventing adversaries from accessing static, recoverable key material.
Data Source
Figure 1
Figure 2
Figure 3a~3d
AI summary
A system for protecting data includes a virtual zeroisation device which receives data to be encrypted and key material for encrypting the data. The key material is stored in a storage device. As the encryption unit encrypts the data using the key material, the encrypted data is stored in the storage device and overwrites the key material.