Ring Introduces New Default Encryption Standard for Cloud Services

On Wednesday, Amazon’s Ring division, known for its innovations in smart home technology, announced its plans to implement a new encryption standard called TAKE (Throw Away the Key Encryption) for video protection and user management. The company asserts that this initiative safeguards user privacy while addressing the limitations of end-to-end encryption, which can restrict functionalities such as video searches, descriptions, and interactions with trusted contacts.

Ring explained that this approach utilizes a dynamic set of encryption keys that are temporarily held in the cloud and accessible only by the company. This design allows users to take advantage of important features. Once a request is completed, Ring guarantees that the keys will be deleted within 24 hours.

Moreover, this encryption standard enables restricted decryption and processing of user videos, enhancing cloud-based features like Smart Alerts, which notify users when individuals, vehicles, or packages are detected by the camera.

“With the implementation of TAKE, Ring can offer vital smart features like Smart Alerts while discarding the encryption key. You will be the sole custodian of the keys to your recorded videos,” the company noted in a blog post.

An Amazon white paper detailing this standard explains that it is derived from Messaging Layer Security (MLS), an open messaging protocol designed by the Internet Engineering Task Force. The company emphasized that with TAKE, if you lose access to your device and obtain a replacement, you can verify your identity by interacting with Ring cameras to retrieve your encryption keys. Furthermore, recovery options such as a passphrase, cloud backups, another authorized device, or passkeys can be utilized for account recovery.

Ring announced that the rollout of TAKE to consumers will begin in September, establishing it as the global default. Users will continue to have the option to manually select end-to-end encryption instead of using TAKE.

Recently, Ring has encountered significant backlash regarding its “Familiar Faces” feature, which depends on facial recognition technology to identify visitors. In June, a class-action lawsuit was launched, claiming that Amazon collected images of bystanders without their consent.