Amazon’s smart home division Ring is introducing a new encryption standard that will become the default for video protection and user controls, while allowing the company to offer more cloud-based features.
The standard, called TAKE, or “Throw Away the Key Encryption,” is designed to balance privacy with features that can be limited by end-to-end encryption, including video search, descriptions and access for trusted users.
Follow THE FUTURE on LinkedIn, Facebook, Instagram, X and Telegram
Temporary Keys Support Cloud Features
Under TAKE, Ring uses rotating encryption keys that are temporarily stored in the cloud and accessible only when needed to provide features activated by users. Once a request is completed, the company says the relevant keys will be deleted within 24 hours.
The system allows Ring to temporarily decrypt and process videos for cloud services such as Smart Alerts, which can notify users when people, vehicles or packages appear in a camera’s view. The company said in a blog post that the encryption key is deleted after the feature has been used.
Amazon’s technical white paper says TAKE was developed using Messaging Layer Security, an open messaging standard created by the Internet Engineering Task Force.
Users Can Still Choose End-To-End Encryption
TAKE will begin rolling out to customers in September and will become the default worldwide. Ring users will still be able to manually select end-to-end encryption instead.
The new system also includes several options for recovering encryption keys. Users who lose access to their device can authenticate by standing near their Ring cameras, while passphrases, cloud backups, another approved device or passkeys can provide alternative recovery methods.
Ring said the approach is intended to preserve access to cloud features without requiring users to give up control of their video encryption keys.
Privacy Concerns Remain
The announcement comes after months of scrutiny over Ring’s use of facial recognition. Its Familiar Faces feature can identify people appearing in camera footage.
In June, a class-action lawsuit accused Amazon of storing images of people passing by Ring cameras without their consent. The introduction of TAKE therefore comes as Ring faces continued questions over how its cameras process and protect personal data.
