Application Layer Data Encryption via Component Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional data encryption methods operating at lower network layers are complex, vulnerable to hacking, and suffer from latency and reliance on packet arrival times, making them inefficient for secure data transmission across networks.

Innovation Solution

The method secures data at the application layer by parsing information into discrete components, replacing them with random strings, creating derived packets, and encrypting these packets for transmission, which are then decrypted and reassembled into human-readable reports at the recipient end, using pre-determined orders and encryption keys.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional encryption methods are used at lower network layers, then data security is provided, but the system complexity increases and latency occurs

Engineering Contradiction:
Improvedata securityVSAvoidencryption process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the information package into discrete components at the application layer before encryption. Each component is individually encrypted, which simplifies the overall encryption process by breaking down complex data structures into manageable units that can be processed independently and reassembled at the receiving end.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent performs preliminary parsing and component identification at the transmitting end before encryption occurs. By pre-organizing the data structure and identifying components that need encryption, the system avoids complex real-time processing during transmission, thereby reducing latency and simplifying the encryption workflow.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If conventional encryption methods are used at lower network layers, then data security is provided, but transmission latency increases

Engineering Contradiction:
Improvedata securityVSAvoidtransmission latency
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

By segmenting information into discrete components at the application layer, the patent enables parallel processing of multiple components during encryption. This segmentation allows the system to encrypt smaller units simultaneously rather than waiting to encrypt entire data packets, significantly reducing transmission latency while maintaining security.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent performs preliminary organization and identification of encryptable components before the encryption process begins. This advance preparation eliminates the need for complex real-time analysis during transmission, allowing encryption to occur more quickly and reducing overall latency.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If data is encrypted at lower network layers using packet-based methods, then security is provided, but the system becomes vulnerable to hacking attempts and packet interception

Engineering Contradiction:
Improvedata securityVSAvoidvulnerability to hacking
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

Instead of encrypting data at lower network layers where packets can be intercepted and manipulated, the patent inverts the approach by encrypting discrete information components at the application layer before they are packaged into network packets. This ensures that even if packets are intercepted, the core information remains protected as it is already encrypted in its component form.

Inventive Principle:
Principle #13The other way round (Inversion)

Solution Approach 2:

The patent performs preliminary encryption of information components before they are assembled into packets for network transmission. This advance encryption protects the data from hacking attempts and packet interception, as the sensitive information is already secured in encrypted form before entering the network transmission layer.

Inventive Principle:
Principle #10Preliminary action

4Reliability

If conventional encryption methods are used, then data protection is achieved, but the encryption process becomes complex and slow

Engineering Contradiction:
Improvedata protectionVSAvoidencryption speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments information into discrete, independently encryptable components. This segmentation allows the encryption process to work on smaller units in parallel, significantly improving encryption speed and productivity while maintaining strong data protection for each component.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

By performing preliminary identification and organization of information components before encryption, the patent streamlines the encryption workflow. This preliminary action eliminates the need for complex real-time processing, allowing the encryption system to operate more efficiently and quickly protect data.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8386595B2Method and system of securing data over networks
Publication Date: 2013.02.26 UNISYS CORP
  • US8386595B2 patent drawing
  • US8386595B2 patent drawing
  • US8386595B2 patent drawing

AI summary

Methods and systems described herein can secure and deliver data over a network. A recipient computer requests a human-readable report from a transmitter computer that initiates a software application to generate a report using data from a backend database. In the application layer, the combination of the report and data is parsed and certain components are replaced to form multiple derived packets of the random strings, the replaced strings, and the combined unaltered string with random strings. The replacement is performed in a pre-determined order that can be a mathematical or logical function. The derived packets are encrypted at the application layer. Further, the receiving computer, in the application layer, decrypts the packets, then finds and replaces the random strings in the combined derived packet, thereby recreating the human-readable report.