AI News Feed
Market watch
Companies

Ring Rolls Out New Encryption System That Limits Data It Can Give Police

Ring's new default encryption, TAKE, deletes its video key copies after 24 hours, limiting what it can give police under legal process.

The system is designed to preserve cloud features such as smart alerts and AI video search while ensuring that Ring can only provide non-video account information and encrypted footage in response to legal requests. According to The Verge, TAKE uses unique, rotating encryption keys for footage, stored in a secure enclave and accessible only under strict conditions based on the features enabled on a user's account. Previously, footage was encrypted in transit to the cloud and at rest, then decrypted for Ring to process those smart features. With TAKE, the keys change for every five minutes of footage, and Ring stores copies of those keys to decrypt the footage but throws away each copy within 24 hours, "leaving you with the keys and full control of your videos," the company said.

TAKE was developed using Messaging Layer Security, an open standard from the Internet Engineering Task Force, according to Ring. The company said it is "inspired by the privacy principles of E2EE (end-to-end encryption)," which Ring offers on some cameras. The two systems differ: with E2EE, Ring never has the keys and cannot process video for cloud-based features. Both options are available on newer cameras that encrypt on-device, and users can switch between them. Older cameras that encrypt at cloud ingress only support TAKE. In a white paper published today, Ring said its copy of the keys is managed inside an AWS Nitro Enclave, with access restricted by "access controls, cryptography, and hardware isolation." The company claims there is no persistent storage and no way for a Ring employee to access it. The stored keys can only be unlocked by the enclave through cryptographic attestation that proves it is running the exact software image Ring approved; the enclave releases a temporary key when an enabled service requests it.

Asked what happens if Ring receives a subpoena from law enforcement, a company spokesperson said: "Where TAKE is enabled, Ring will only be able to provide non-video information (such as basic subscriber information) and encrypted video files in response to the valid legal process. We have updated our Law Enforcement Guidelines to reflect this change."