Ring Introduces New Default Encryption Standard for Cloud Services

On Wednesday, Amazon’s Ring, a division focused on smart home technology, announced it will adopt a new encryption standard known as TAKE (Throw Away the Key Encryption) as the default option for video encryption and user management. The company asserts that this method safeguards user privacy without using end-to-end encryption, which could restrict certain functionalities like video searching, descriptions, and collaboration with trusted users.

Ring explains that this standard uses a rotating set of encryption keys temporarily stored in the cloud, accessible only to the company to support the features its users might utilize. Once the request is fulfilled, Ring promises to delete the keys within 24 hours.

Moreover, the standard facilitates temporary decryption and processing of users’ videos, allowing for cloud-based features like Smart Alerts, which inform users when individuals, vehicles, or packages enter the view of the camera.

“By implementing TAKE, Ring is able to offer valuable smart features, such as Smart Alerts, while discarding the encryption key. Only you maintain possession of the keys to your video,” the company noted in a blog entry.

A white paper from Amazon detailing the standard indicates that it is based on Messaging Layer Security (MLS), an open messaging standard developed by the Internet Engineering Task Force. The company mentioned that with TAKE, if you lose access to your device and obtain a new one, you can verify your identity by being in proximity to the Ring cameras to recover your encryption keys. Additionally, you can use a passphrase, cloud backups, another approved device, or passkeys for account recovery.

Ring stated that the deployment of TAKE to customers will initiate in September, establishing it as the global default. Users will still have the option to manually select end-to-end encryption instead of TAKE.

Recently, Ring has faced significant backlash regarding its “Familiar Faces” feature, which leverages facial recognition to identify visitors. In June, a class-action lawsuit was filed alleging that Amazon stored images of bystanders without their consent.