Ring Says New Encryption Limits What It Can Give Police

Ring is implementing a new encryption system called TAKE, or Throw Away the Key Encryption, which automatically changes video keys every five minutes and deletes Ring's copy after 24 hours. This system aims to maintain cloud features like smart alerts and AI video search while restricting what Ring can provide to law enforcement under legal requests, excluding non-video account information.

The Verge explains that TAKE utilizes unique, rotating encryption keys stored in a secure enclave, accessible only under specific conditions based on account features. Currently, footage from Ring cameras is encrypted both in transit and at rest, decrypted by Ring for smart features processing. With TAKE, keys change every five minutes, and Ring stores copies of these keys for 24 hours before discarding them, leaving the user with control over their videos.

Developed using Messaging Layer Security, an open standard from the Internet Engineering Task Force, TAKE is inspired by end-to-end encryption principles. However, while E2EE prevents Ring from accessing video footage, TAKE allows users to switch between encryption methods. Ring claims its keys, managed within an AWS Nitro Enclave with restricted access, have no persistent storage and can only be unlocked through cryptographic attestation, ensuring no employee can access them.

When questioned about potential law enforcement access, Ring's spokesperson confirmed they would only provide non-video information and encrypted videos in response to valid legal processes with TAKE enabled, updating their Law Enforcement Guidelines accordingly.