Ring Introduces New Default Encryption Standard for Cloud Services

On Wednesday, Amazon’s Ring, a division focused on smart home technology, announced its intention to implement a new encryption standard known as TAKE (Throw Away the Key Encryption) as the default method for both video encryption and user management. The company asserts that this method safeguards user privacy without relying on end-to-end encryption, which could restrict certain functionalities like video searches, descriptions, and interactions with trusted users.

Per Ring, this standard utilizes a rotating set of encryption keys that are briefly stored in the cloud and accessible only by the company, allowing for features that users might desire. After a request has been fulfilled, Ring assures that the keys will be deleted within 24 hours.

Furthermore, the standard allows for temporary decryption and processing of users’ videos, facilitating cloud-based features such as Smart Alerts, which notify users when individuals, vehicles, or packages enter the camera’s field of view.

“By integrating TAKE, Ring can offer vital smart features like Smart Alerts while eliminating the encryption key. You alone will hold the keys to your recorded footage,” the company explained in a blog entry.

A white paper from Amazon detailing this standard indicates that it is founded on Messaging Layer Security (MLS), an open messaging framework developed by the Internet Engineering Task Force. The company mentioned that with TAKE, if you lose access to your device and get a new one, you can verify your identity by being in proximity to the Ring cameras to restore your encryption keys. Additionally, you can also utilize a passphrase, cloud backups, another authorized device, or passkeys for account recovery.

Ring has announced that the rollout of TAKE for customers will begin in September, establishing it as the global default. Users will continue to have the option to manually select end-to-end encryption over TAKE.

Recently, Ring has faced significant backlash regarding its “Familiar Faces” feature, which employs facial recognition technology to identify visitors. In June, a class-action lawsuit was filed alleging that Amazon gathered images of bystanders without their consent.