Ring Unveils TAKE Encryption Standard as New Default for Cloud Video Features
Amazon’s smart home brand Ring has announced the rollout of a new default encryption standard named Throw Away the Key Encryption (TAKE). Designed to balance user privacy with smart device functionality, the new protocol will begin rolling out globally in September as the default configuration for video encryption and user controls.
What Happened
Ring stated on Wednesday that it is adopting TAKE to safeguard video data without relying strictly on end-to-end encryption. While end-to-end encryption secures content, it can also restrict certain cloud-enabled capabilities, including video search, video descriptions, and access for shared trusted users.
Under the TAKE framework, the system uses a rotating set of encryption keys that are temporarily held in the cloud. Ring can access these keys solely to power specific features activated by the user, such as Smart Alerts that identify people, vehicles, or packages within a camera’s view. Once the requested cloud processing is finished, Ring deletes the temporary keys within 24 hours, leaving permanent access solely with the user.
According to an Amazon white paper, TAKE was developed using Messaging Layer Security (MLS), an open messaging standard created by the Internet Engineering Task Force (IETF).
Key Highlights
- Default Rollout: TAKE will become the default encryption standard worldwide, rolling out gradually to Ring customers starting in September.
- Temporary Key Retention: Decryption keys used for processing are deleted by the company within 24 hours after a cloud request is fulfilled.
- Preserved Functionality: Unlike traditional end-to-end encryption, TAKE allows users to keep cloud-based tools such as Smart Alerts, video search, video descriptions, and shared trusted user settings.
- User Choice: Customers who prefer full end-to-end encryption over TAKE retain the option to enable it manually.
- Account Recovery Methods: Users who lose access to their device can authenticate and restore keys by standing near their Ring camera, or by using passkeys, a passphrase, another approved device, or cloud-based backups.
Why This Matters
Standard end-to-end encryption prevents service providers from accessing video streams, which in turn limits a device maker’s ability to run advanced server-side processing like content tagging and sharing. Ring claims TAKE resolves this trade-off by temporarily decrypting footage to run features like Smart Alerts before discarding the operational keys.
The shift also follows intense scrutiny over Ring’s data practices. Over recent months, the company has faced criticism regarding its Familiar Faces tool, which uses facial recognition technology to detect visitors. Furthermore, Amazon was named in a class action lawsuit in June alleging that it stored images of passersby without consent.
What to Watch Next
Ring will begin implementing TAKE gradually across user accounts globally starting in September. Users will have the option to maintain the new default configuration or manually switch to full end-to-end encryption if they choose to prioritize locked-down privacy over automated cloud capabilities.
Frequently Asked Questions
What does TAKE stand for?
TAKE stands for Throw Away the Key Encryption, referencing the system’s process of deleting temporary decryption keys within 24 hours of completing cloud tasks.
Can Ring users still use end-to-end encryption?
Yes. Although TAKE is becoming the default standard worldwide, users can still manually choose end-to-end encryption instead.
How does Ring handle key recovery if a device is lost?
If access is lost, users who purchase a replacement device can authenticate themselves by standing near their Ring cameras to recover their encryption keys. Alternative recovery methods include passkeys, a passphrase, cloud-based backups, or another approved device.
Source: Amazon corporate announcement and reporting via TechCrunch.