Cache Data Block Encryption with Integrated Metadata
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Malware attacks on processing devices with multiple hardware components can compromise data integrity by accessing and manipulating storage spaces, posing a risk of unauthorized control and data alteration.
Innovation Solution
Implementing data compression and encryption techniques that integrate metadata within data blocks, using secure hash algorithms for integrity checking, and employing address-based encryption to thwart malware attempts by ensuring data integrity and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data compression and encryption are implemented to protect data integrity and security, then data security and integrity are improved, but processing performance and storage efficiency deteriorate
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing hash values of data blocks along with their encrypted forms. When integrity verification is needed, the system retrieves and compares these pre-stored hash values rather than recalculating them, significantly reducing the processing overhead of integrity checking while maintaining strong security guarantees.
Solution Approach 2:
The patent introduces hash functions as an intermediary mechanism between the encrypted data and the integrity verification process. The hash values serve as a mediator that can be efficiently computed and compared to verify data integrity without requiring decryption or complex cryptographic operations on the actual data blocks, thus maintaining processing performance.
2Quantity of substance
If metadata is integrated within data blocks to enable decompression and decryption, then storage efficiency is improved, but data block complexity increases
Solution Approach 1:
The patent merges the metadata (hash values, encryption parameters, compression information) directly within the data blocks themselves rather than storing them separately. This integration eliminates the need for additional metadata storage structures and allows the entire data block to be self-contained, improving storage efficiency while the structured format keeps complexity manageable.
Solution Approach 2:
The data block structure is designed to be multi-functional, serving simultaneously as the encrypted data container, the metadata repository, and the integrity verification unit. This universal design eliminates the need for separate structures for each function, reducing overall system complexity while achieving storage efficiency.
3Reliability
If address-based encryption is employed to thwart malware attempts, then security against unauthorized access is improved, but encryption complexity increases
Solution Approach 1:
The patent applies local quality by using different encryption keys derived from different storage device addresses for different data blocks. Each data block is encrypted with a key specific to its location, providing localized security tailored to each block's address. This approach enhances security against malware that might target specific regions while keeping the encryption mechanism relatively simple through systematic key derivation.
Data Source
AI summary
Various embodiments are generally directed to techniques for encrypting stored data. An apparatus includes a processor component comprising a cache that comprises a cache line to store a first block of data corresponding to a second block of encrypted data stored within a storage; a compressor to compress the data within the first block to generate compressed data within the first block to clear sufficient storage space within the first block to store metadata associated with generation of the second block of encrypted data from the first block in response to eviction of the first block from the cache line; and an encrypter to encrypt the compressed data within the first block to generate the encrypted data within the second block and to store encryption metadata associated with encrypting the compressed data within the second block as a portion of the metadata associated with the generation of the second block.