Credential-Based Scrambling for Distributed Ledger Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption methods, such as one-time pads and public key cryptography, face vulnerabilities like the Pass the Hash attack and theft of digital certificates, which compromise data security, especially in large file encryption and distributed ledger technologies.
Innovation Solution
A method that secures encrypted data by deriving a scrambling key and an unscrambling key from a plaintext credential, applying these keys to encrypted data to create a pseudo-random permutation, fragmenting the data, and reassembling it for recovery, thereby adding an independent encryption layer that is computationally simple and resistant to replication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric encryption (AES) is applied to very large files, then data security is improved, but computational resources required increase considerably
Solution Approach 1:
The patent segments the encryption process into two distinct layers: a first encryption layer using symmetric encryption (AES) for strong security, and a second encryption layer using a one-time pad derived from a credential for additional protection. This segmentation allows each layer to operate efficiently on different data sizes and complexity levels, reducing the computational burden on large files while maintaining high security standards.
Solution Approach 2:
The patent introduces a credential-based one-time pad as an intermediary element between the plaintext and the final encrypted output. This intermediary layer is generated from a separate credential independent of the symmetric encryption key, providing an additional security barrier without requiring the symmetric encryption algorithm to process the entire large file multiple times, thus reducing computational resource consumption.
2Reliability
If credential-based encryption is applied to data, then security against Pass the Hash attacks is improved, but integration complexity with existing protocols increases
Solution Approach 1:
The patent designs the credential-based encryption system to be universally compatible with existing encryption protocols and distributed ledger technologies. The credential can be integrated alongside standard symmetric encryption algorithms like AES, allowing the system to maintain compatibility with current infrastructure while adding enhanced security features. The independent credential mechanism can be applied to various data types and transmission protocols without requiring fundamental changes to existing systems.
Data Source
AI summary
Securing encrypted data by obtaining a credential including a plaintext string and a seed, deriving from the credential, a scrambling key and a corresponding unscrambling key, where the corresponding unscrambling key is based on a pseudo-random permutation derived from the credential, obtaining encrypted data, where the encrypted data is encrypted with a primary scheme that is independent of the credential, applying the scrambling key to the encrypted data to produce scrambled encrypted data, where recovering the encrypted data from the scrambled encrypted data requires applying the unscrambling key, and replacing the encrypted data with the scrambled encrypted data, thereby securing the encrypted data with the independent credential.