Ring Introduces New Default Encryption Standard for Cloud Services

On Wednesday, Amazon’s Ring division, known for its innovations in smart home technology, announced its intention to implement a new encryption standard called TAKE (Throw Away the Key Encryption) as the default method for video encryption and user management. The company asserts that this method safeguards user privacy while avoiding the limitations inherent in end-to-end encryption, such as restricting features like video searches, descriptions, and interactions with trusted contacts.

According to Ring, this technique utilizes a dynamic set of encryption keys that are temporarily stored in the cloud and can only be accessed by the company, allowing users to enjoy the necessary functionalities. Once a request is processed, Ring guarantees that the keys will be deleted within 24 hours.

Moreover, this standard allows for restricted decryption and processing of user videos, thereby enhancing cloud-based capabilities such as Smart Alerts, which alert users when individuals, vehicles, or packages come into the camera’s view.

“By launching TAKE, Ring can offer vital smart features like Smart Alerts while discarding the encryption key. You will be the sole possessor of the keys to your recorded videos,” the company declared in a blog post.

A white paper released by Amazon detailing this standard indicates that it is built on Messaging Layer Security (MLS), an open messaging framework developed by the Internet Engineering Task Force. The company emphasized that with TAKE, if you lose access to your device and obtain a new one, you can verify your identity by approaching Ring cameras to recover your encryption keys. You can also use a passphrase, cloud backups, another authorized device, or passkeys for account recovery.

Ring has revealed that the consumer rollout of TAKE will begin in September, positioning it as the global default. Users will still have the choice to manually opt for end-to-end encryption instead of TAKE.

Recently, Ring has encountered significant criticism regarding its “Familiar Faces” feature, which employs facial recognition technology to identify visitors. In June, a class-action lawsuit was filed, claiming that Amazon collected images of bystanders without obtaining their consent.