Determining when to use convergent encryption
AssigneeInternational Business Machines Corporation
InventorJason K. Resch
Life of this patent
Estimating the term…
Abstract
A data encryption system receives data to be encrypted prior to being transmitted to a storage unit. The received data is analyzed to determine a secure storage approach based on a risk level associated with the received data. In response to the risk level satisfying a threshold risk level the data encryption system uses a convergent encryption technique to encrypt the received data, but in response to the risk level failing to satisfy the threshold risk level, the data encryption system encrypts the received data using a key based on a random number. The encrypted data is transmitted to a storage unit.
Claims20
A method for use in a data encryption system, the method comprising:
- receiving received data to be encrypted prior to transmission to a storage unit;
- analyzing the received data to determine a secure storage approach based on a risk level associated with the received data;
- in response to the risk level satisfying a threshold risk level, using a convergent encryption technique to encrypt the received data;
- in response to the risk level failing to satisfy the threshold risk level, encrypting the received data using a key based on a random number;
- and
- transmitting encrypted data to a storage unit.
A computing device comprising:
- a computing core configured to implement a data analysis module, a key generator, and an encryption module;
- the data analysis module configured to:
- analyze received data to determine a secure storage approach based on a risk level associated with the received data, wherein:
- in response to the risk level satisfying a threshold risk level, setting the secure storage approach to use a convergent encryption technique to encrypt the received data;
- in response to the risk level failing to satisfy the threshold risk level, setting the secure storage approach to use an encryption technique employing a key generated based on a random number to encrypt the received data;
- transmit information specifying the secure storage approach to a key generator;
- the key generator configured to:
- generate an encryption key based on the secure storage approach;
- transmit the encryption key to the encryption module;
- the encryption module configured to:
- receive data to be encrypted;
- encrypt the data to generate encrypted data using the encryption key;
- and
- an interface configured to transmit the encrypted data to a storage unit.
A data encryption system comprising:
- a data analysis module configured to;
- analyze received data to determine a secure storage approach based on a risk level associated with the received data, wherein:
- in response to the risk level satisfying a threshold risk level, setting the secure storage approach to use a convergent encryption technique to encrypt the received data;
- in response to the risk level failing to satisfy the threshold risk level, setting the secure storage approach to use an encryption technique employing a key generated based on a random number to encrypt the received data;
- transmit information specifying the secure storage approach to a key generator;
- a key generator configured to;
- generate an encryption key based on the secure storage approach;
- transmit the encryption key to an encryption module;
- the encryption module configured to:
- receive data to be encrypted;
- encrypt the data to generate encrypted data using the encryption key;
- and
- a storage unit configured to receive and store the encrypted data.
Dependencies are inferred from the claim text.