Security and data privacy for lighting sensory networks
In various example embodiments, a system and method are provided for protection customer data collected at sensor nodes within a networked system. A key recovery module determines the encrypted sensor data in a request was encrypted with a certified public key associated with a first customer key-pair. The first customer key-pair represents a recovered private key. The key recovery module determines the private key associated with the first customer key-pair is encrypted with the private key associated with a second customer key-pair. The private key associated with the first customer key-pair is decrypted by using the private key associated with the second customer key-pair. The encrypted sensor data in the request is decrypted using the decrypted private key associated with the first customer key-pair.
1. A method for protecting unauthorized access to data, the data collected by sensor nodes within a sensor network and accessible to one or more applications by authorized customers through a service data platform, the service data platform in communication with the sensor network, comprising:
generating a key-pair associated with an authorized customer including a public encryption key and a private decryption key;
requesting certification of the public encryption key;
receiving a certificate representing a certified public encryption key;
distributing the certificate to the sensor nodes within the sensor network to enable the sensor nodes to encrypt the data at the sensor nodes with the certificate associated with the authorized user prior to being transmitted to the service data platform;
splitting, using at least one processor of a machine, the private decryption key into multiple shares to decrypt the encrypted data when accessed by an application associated with the authorized customer;
storing a first share of the multiple shares at the service data platform;
storing a password encrypted second share of the multiple shares at the service data platform;
transmitting a third share of the multiple shares to a third-party device for storage;
in response to a request from the application associated with the authorized customer to access the encrypted data, receiving the encrypted data;
determining that the private decryption key cannot be reconstructed using the combination of the first share and the password encrypted second share at the service data platform to decrypt the encrypted data;
accessing the third party share from the third party device; and
recovering, at the service data platform, the private decryption key using the third share and at least one of the first share and the password encrypted second share of the multiple shares.
2. The method of claim 1 , further comprising:
receiving a request associated with the authorized customer to generate the key-pair, the key-pair representing a customer key-pair.
3. The method of claim 1 , wherein requesting certification of the public encryption key comprises:
requesting a certificate authority to generate customer certificates associated with the key-pair.
4. The method of claim 1 , further comprising:
transmitting the second share to a customer device.
5. The method of claim 1 , further comprising:
destroying the private decryption key after splitting the private decryption key into multiple shares.
6. The method of claim 1 , wherein the first share of the multiple shares is assigned to the service data platform, a second share of the multiple shares is assigned to the authorized customer, and the third share of the multiple shares is assigned to a third party.
7. The method of claim 6 , wherein the third party represents a trusted third party.
8. The method of claim 6 , wherein storing the password encrypted second-share at the service data platform further comprising:
requesting a password from the authorized customer;
in response to the request, receiving the password from the authorized customer;
encrypting the second share of the multiple shares using the password from the authorized customer; and
storing the password encrypted second share at the service data platform.
9. A system for protecting customer data collected at sensor nodes within a networked system, comprising:
a memory device for storing instructions; and
at least one processor of a machine, which, when executing the instructions, causes the system to perform operations comprising:
generating a key-pair associated with a customer including a public encryption key and a private decryption key;
requesting certification of the public encryption key;
receiving a certificate representing a certified public encryption key;
distributing the certificate to the sensor nodes within the sensor network to enable the sensor nodes to encrypt the data at the sensor nodes with the certificate associated with the authorized user prior to being transmitted to the service data platform;
splitting the private decryption key into multiple shares to decrypt the encrypted data when accessed by an application associated with the authorized customer;
storing a first share of the multiple shares at the service data platform;
storing a password encrypted second share of the multiple shares at the service data platform;
transmitting a third share of the multiple shares to a third-party device for storage;
in response to a request from the application associated with the authorized customer to access the encrypted data, receiving the encrypted data;
determining that the private decryption key cannot be reconstructed using the combination of the first share and the password encrypted second share at the service data platform to decrypt the encrypted data;
accessing the third party share from the third party device; and
recovering, at the service data platform, the private decryption key using the third share and at least one of the first share and the password encrypted second share of the multiple shares.
10. The system of claim 9 , wherein the at least one process of the machine, which when executing the instructions, further causes the system to perform operations comprising:
receiving a request associated with the authorized customer to generate the key-pair, the key-pair representing a customer key-pair.
11. The system of claim 9 , wherein the operation of requesting certification of the public encryption key comprising:
requesting a certificate authority to generate customer certificates associated with the key-pair.
12. The system of claim 9 , wherein the at least one process of the machine, which when executing the instructions, further causes the system to perform operations comprising:
transmitting the second share to a customer device.
13. The system of claim 9 , wherein the at least one process of the machine, which when executing the instructions, further causes the system to perform operations comprising:
destroying the private decryption key after splitting the private decryption key into multiple shares.
14. The system of claim 9 , wherein the first share of the multiple shares is assigned to the service data platform, a second share of the multiple shares is assigned to the authorized customer, and the third share of the multiple shares is assigned to a third party.
15. The system of claim 14 , wherein the third party represents a trusted third party.
16. The system of claim 14 , wherein the operation of storing the password encrypted second-share of at the service data platform further comprising:
requesting a password from the authorized customer;
in response to the request, receiving the password from the authorized customer;
encrypting the second share of the multiple shares using the password from the authorized customer; and
storing the password encrypted second share at the service data platform.