Client-Side Encryption Block Alignment and Lease Operations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed data storage systems, client-side encryption faces challenges such as concurrency issues, end-of-file management, and alignment problems due to block-based encryption, which can lead to collisions and extra data generation that is not part of the file, requiring improved methods for secure and efficient encryption and decryption.
Innovation Solution
The solution involves a client-side encryption method that uses a read-modify-write sequence for partial cipher-blocks, combined with lease operations for atomic writes and block alignment, allowing for unaligned write operations and handling of remainders by storing extra data elsewhere, ensuring proper decryption and file size integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If block-based encryption is used, then encryption security is improved, but file size integrity and alignment are worsened due to extra data bytes being added
Solution Approach 1:
The patent divides the encryption process into segments by introducing cipher-block alignment operations that process data in manageable units. The encryption system segments the file into blocks, processes them individually with proper alignment, and handles remainders separately, thus maintaining file size integrity while preserving encryption security.
Solution Approach 2:
The patent changes the encryption parameters by introducing alignment information and modified block handling mechanisms. The system adjusts the encryption process to account for block alignment requirements and remainder handling, transforming the traditional block-based encryption into a size-preserving operation that maintains file integrity.
2Reliability
If conventional encryption methods are used, then data protection is improved, but concurrency issues and collisions are worsened in distributed environments
Solution Approach 1:
The patent introduces lease operations as an intermediary mechanism between multiple concurrent encryption processes. The lease system acts as a mediator that coordinates access to shared resources, preventing collisions and managing concurrency issues in distributed environments while maintaining data protection through encrypted operations.
Solution Approach 2:
The patent implements feedback mechanisms through lease expiration and renewal operations. The system continuously monitors and adjusts access permissions based on current operational state, providing feedback to prevent concurrent collisions and manage distributed encryption operations safely and efficiently.
3Productivity
If block alignment operations are performed, then encryption efficiency is improved, but additional operations and complexity are introduced
Solution Approach 1:
The patent merges multiple operations into unified lease operations that combine alignment, encryption, and concurrency management into single atomic operations. This reduces the total operation count by combining what would otherwise be separate steps into integrated operations that execute together, improving efficiency while managing complexity.
Solution Approach 2:
The patent creates universal lease operations that serve multiple functions simultaneously: they provide concurrency control, handle block alignment, manage remainder data, and coordinate encryption operations. This multi-functionality reduces the need for separate specialized operations, improving overall encryption efficiency while consolidating complexity into a single robust mechanism.
Data Source
AI summary
Methods and systems for encrypting and decrypting data are described. In one embodiment, a client computing system sends to a server computing system over a network a first network request to perform multiple operations such as a lease operation and a fetch operation. In response, the server computing system performs the operations. Subsequently, the client computing system can send subsequent network requests to write re-encrypted data and to relinquish the lease. The subsequent network requests may also be single network requests that perform lease operations, as well as other operations, such as operations for block alignment purposes. The client computing system can send an actual end of file when relinquishing the lease so that the server computing system can handle a remainder of data that is used for subsequently decrypting the re-encrypted data.