Securing Data Compression via Segmented Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data compression methods in computer systems face challenges in securing compressed data, particularly with Huffman codes that are difficult to cryptanalyze and require significant encryption cycles, leading to inefficiencies and vulnerabilities in data security.
Innovation Solution
The method involves optimizing encryption cycles by applying strong encryption on the header and trailer sections of compressed data, while using lightweight encryption on the middle section, and employing techniques like XOR logic operations and reduced encryption rounds to secure the data, thereby concentrating encryption resources effectively.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If strong encryption is applied to the entire compressed data stream, then data security is improved, but encryption cycles and processing time increase significantly
Solution Approach 1:
The patent divides the compressed data stream into three distinct sections: header, middle, and trailer. Different encryption strategies are applied to each section - strong encryption for header and trailer containing critical key information, and lightweight encryption for the middle section. This segmentation allows the system to maintain high security where needed while reducing overall encryption cycles and processing time.
Solution Approach 2:
The patent applies different quality levels of encryption to different parts of the data stream. The header and trailer sections receive strong encryption with full security measures, while the middle section uses lightweight encryption with reduced security measures. This local quality approach optimizes the balance between security and processing efficiency by concentrating encryption resources on critical sections.
2Reliability
If encryption is applied to protect critical sections, then security is improved, but device complexity increases
Solution Approach 1:
The patent segments the encryption implementation into distinct modules for header encryption, middle section encryption, and trailer encryption. Each module can be independently configured and maintained, reducing overall system complexity. The segmentation allows complex encryption operations to be isolated to specific sections rather than requiring complex logic throughout the entire data processing pipeline.
Solution Approach 2:
The patent applies partial encryption actions - using reduced encryption rounds and lightweight encryption algorithms for the middle section where full security is less critical. This partial action approach reduces device complexity by avoiding the need to implement and maintain full-strength encryption across the entire data stream, while still providing adequate protection for critical sections.
3Productivity
If reduced encryption rounds are used, then processing speed is improved, but security strength decreases
Solution Approach 1:
The patent applies different encryption strengths to different sections - full encryption strength with standard or increased rounds for header and trailer sections containing key information, and reduced encryption strength with fewer rounds for the middle section. This local quality approach maintains high productivity through reduced rounds in the middle section while preserving security strength in critical sections.
Solution Approach 2:
The patent segments the data stream to isolate critical key information in header and trailer sections that receive full encryption strength, while allowing reduced encryption strength in the middle section. This segmentation enables the system to achieve high throughput overall while maintaining adequate security where it matters most.
Data Source
AI summary
Various embodiments are provided for securing data compression in a computer environment are presented. Encryption cycles of a data compression stream may be optimized by applying a first type of encryption on a first section and a last section of compressed data and a second type of encryption on a middle section of compressed data, the first type of encryption containing key information relating to the middle section of the compressed data.