Ring sets TAKE encryption as the default for cloud video tools
Amazon’s Ring will gradually introduce Throw Away the Key Encryption, or TAKE, from September as the default video-encryption setting for cloud features worldwide. Customers will still be able to choose end-to-end encryption manually, but Ring positions TAKE as a way to retain cloud functions while giving users control over video-access keys.
The system uses a rotating set of encryption keys that are stored in the cloud only temporarily. Ring can access those keys solely to operate features that a customer has enabled, then deletes them within 24 hours of completing the request. Ring says that only the user retains the keys to their video.
Cloud features require temporary processing
Ring says end-to-end encryption can limit functions including video search, video descriptions and sharing with trusted users. TAKE is intended to let the company temporarily decrypt and process video for cloud-based services without making end-to-end encryption the default configuration.
One example is Smart Alerts, which can notify a customer when a person, vehicle or package enters a camera’s field of view. The distinction is material: Ring’s design allows processing when a user has activated a feature, while the associated temporary encryption key is deleted after that processing is complete.
MLS is the technical foundation
Amazon’s white paper says TAKE was developed on a base of Messaging Layer Security, the open messaging standard created by the Internet Engineering Task Force. The company also describes several recovery paths for users who lose access to a device. A customer buying a replacement device can authenticate by standing near Ring cameras to recover encryption keys.
Other recovery options include a passphrase, cloud-based backups, another approved device and passkeys. Those mechanisms are part of how Ring seeks to combine key control with continued access to cloud functionality after a device is lost or replaced.
Privacy scrutiny remains in focus
The rollout follows criticism of Ring’s Familiar Faces feature, which uses facial recognition to identify visitors. The privacy context includes Amazon lawsuit over Ring Familiar Faces because allegations over images of passersby without consent put collection and processing practices under closer attention.
For businesses and households deploying connected cameras, the practical implication is to examine which video features are enabled, how long access material is retained, and which recovery methods are acceptable before relying on the default encryption setting.