Ring Introduces New Default Encryption Standard for Cloud Services

On Wednesday, Amazon’s Ring division, known for its innovations in smart home technology, announced its intention to implement a new encryption standard called TAKE (Throw Away the Key Encryption) as the default approach for video encryption and user management. The company asserts that this method safeguards user privacy without the need for end-to-end encryption, which could restrict functionalities like video searches, descriptions, and interactions with trusted contacts.

According to Ring, this method utilizes a dynamic collection of encryption keys that are temporarily housed in the cloud, accessible only to the company, thus allowing users to take advantage of desired features. Once a request has been completed, Ring guarantees the keys will be deleted within 24 hours.

Furthermore, this standard allows for limited decryption and processing of user videos, thereby improving cloud-based functionalities like Smart Alerts, which notify users when individuals, vehicles, or packages enter the camera’s view.

“With the implementation of TAKE, Ring can deliver essential smart features like Smart Alerts while discarding the encryption key. You will be the sole possessor of the keys to your recorded videos,” the company stated in a blog post.

A white paper released by Amazon detailing this standard indicates that it is founded on Messaging Layer Security (MLS), an open messaging framework developed by the Internet Engineering Task Force. The company emphasized that with TAKE, if you lose access to your device and obtain a new one, you can verify your identity by being close to Ring cameras to recover your encryption keys. You may also use a passphrase, cloud backups, another authorized device, or passkeys for account recovery.

Ring announced that the rollout of TAKE for consumers will begin in September, establishing it as the global default. Users will still have the ability to manually choose end-to-end encryption over TAKE.

Recently, Ring has encountered significant criticism regarding its “Familiar Faces” feature, which leverages facial recognition technology to identify visitors. In June, a class-action lawsuit was filed, claiming that Amazon collected images of passersby without their consent.