Compressed Archive Key Validation via Pseudo-Stream Salt
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure archive storage systems face vulnerabilities when using the same password for multiple archives, as it simplifies unauthorized access, and changing passwords requires re-enciphering large archives across multiple volumes, which is time-consuming and resource-intensive.
Innovation Solution
A method involving the generation of a pseudo-stream, compression with validation data, and enciphering it with an archive key, allowing for secure and efficient validation of compressed encrypted archive keys without directly deriving the key from the password, thus enhancing security and reducing the burden of password changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the same password is used for multiple archives, then the enciphering process is simplified and faster, but the security is weakened because the same key is generated for each archive making it easier to crack
Solution Approach 1:
The patent segments the key generation process by introducing a salt value that is unique to each archive. Instead of generating the same key from the same password for all archives, each archive gets a different salt value that is combined with the password to produce a unique key. This segmentation approach maintains the simplicity of password-based enciphering while ensuring each archive has a distinct key for security.
Solution Approach 2:
The patent introduces a salt value as an intermediary element between the password and the key generation process. This salt value acts as a mediator that modifies the key derivation process, ensuring that even identical passwords produce different keys when different salts are used. The salt value is stored with the archive data, allowing verification without requiring re-enciphering.
2Reliability
If the password is changed, then the security is improved with a new key, but the entire archive must be re-enciphered which is time-consuming and resource-intensive
Solution Approach 1:
The patent extracts the salt value from the key derivation process and stores it separately with the archive data. This allows the system to verify password correctness by re-computing the key with the stored salt without needing to re-encipher the entire archive. The extraction of the salt value enables efficient password verification and changes.
Solution Approach 2:
The patent performs preliminary action by pre-computing and storing the salt value with the archive data during the initial enciphering process. This preliminary storage of verification data enables fast password verification and changes later without requiring time-consuming re-enciphering of the entire archive, thus reducing the time and resources needed for password changes.
3Reliability
If large archives are re-enciphered with a new key, then the security is updated, but the process consumes significant computational resources and time
Solution Approach 1:
The patent applies partial action by performing only the necessary key verification computation using the stored salt value, rather than re-enciphering the entire archive. This partial computation approach updates or verifies security without the excessive resource consumption of full re-enciphering, consuming minimal computational resources while maintaining security.
4Adaptability or versatility
If archives are distributed over multiple volumes, then the storage flexibility is improved, but the password change process becomes more complex and time-consuming
Solution Approach 1:
The patent creates a universal solution by storing the salt value with each archive volume, making the verification process consistent across single-volume and multi-volume archives. The same salt-based verification mechanism works universally regardless of whether the archive is distributed across multiple volumes or stored in a single location, simplifying the password change process while maintaining storage flexibility.
Data Source
AI summary
An apparatus and a method for validating compressed encrypted archive keys is described. In one embodiment, a pseudo-stream is generated for an archive. The pseudo-stream is made of a small amount of random text. The pseudo-stream is attached to a stream of the archive. The pseudo-stream and stream are compressed using the compression algorithm that includes validation data. The compressed pseudo-stream is then enciphered with an archive key.