Cryptographic Data Stream Filtering for Selective Access Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing encryption methods for data streams are inconvenient when multiple parties need selective access to different portions of the data, as providing a single key for decryption often authorizes access to the entire data stream, compromising privacy.

Innovation Solution

A cryptographic technique that encrypts each data portion of a stream with a specific key, allowing a single distributable stream to be decrypted by authorized parties with access to only their designated data portions, using a system that includes data merging, mapping, and a master cipher.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a single key is used to encrypt the entire data stream, then the encryption process is simple and efficient, but all authorized parties gain access to the entire data stream including portions they are not authorized to view

Engineering Contradiction:

Improveencryption process simplicityVSAvoidunauthorized access to sensitive information

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent divides the single data stream into multiple portions, where each portion is encrypted with a different key. This segmentation allows selective access control while maintaining a unified data stream structure, resolving the contradiction between simple encryption and selective access control.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Different portions of the data stream are encrypted with different keys based on their sensitivity and access requirements. This local differentiation of encryption properties enables each party to access only their authorized portions while maintaining overall system simplicity.

Inventive Principle:

Principle #3Local quality

2Object-affected harmful factors

If multiple keys are used to encrypt different portions of the data stream, then selective access control is achieved, but the encryption process becomes more complex

Engineering Contradiction:

Improveselective access controlVSAvoidencryption process complexity

Core Design Contradiction:

Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

Multiple encrypted portions are merged into a single distributable data stream. This merging approach maintains selective access control through multiple keys while presenting a unified, simple interface for data distribution and access.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The encryption system performs multiple functions: it encrypts different portions with different keys for selective access control, merges them into a single stream for simple distribution, and maintains the ability to decrypt only authorized portions. This multi-functionality resolves the complexity issue.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Ease of operation

If the entire data stream is encrypted with a single key, then data distribution is simplified, but privacy of individual data portions cannot be protected

Engineering Contradiction:

Improvedata distribution simplicityVSAvoidprivacy of data portions

Core Design Contradiction:

Ease of operationVSLoss of information

Solution Approach 1:

The data stream is segmented into multiple portions with different privacy requirements, each encrypted with a corresponding key. This segmentation enables simple distribution of a single stream while protecting the privacy of individual portions through selective encryption.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Different portions of the data stream receive different encryption treatments based on their privacy requirements. This local quality differentiation maintains data distribution simplicity while ensuring privacy protection for sensitive information.

Inventive Principle:

Principle #3Local quality

4Loss of information

If selective access encryption is implemented, then privacy of data portions is protected, but the system requires multiple keys and increased processing complexity

Engineering Contradiction:

Improveprivacy protectionVSAvoidsystem complexity

Core Design Contradiction:

Loss of informationVSDevice complexity

Solution Approach 1:

Multiple encrypted portions are combined into a single distributable stream, which simplifies the system interface and data distribution while maintaining selective access control and privacy protection through the underlying multi-key encryption structure.

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS12363083B2System and method for use of filters within a cryptographic process

Publication Date: 2025.07.15 CHOL INC

AI summary

A method for encrypting plaintext data is enclosed that includes operations of receiving the plaintext data, the plaintext data including a plurality of data portions, encrypting each of the plurality of data portions using a specific key for each data portion, merging each of the plurality of data portions together to form a single data stream, generating a data map of the single data stream, appending the data map to the single data stream, and performing a master cipher to form an encrypted distributable stream. Operations of the encrypting include: an additive operation on each byte of the first data portion using the additive table, an XOR operation on each byte of the first data portion as modified by the additive operation, a substitution operation on each byte of the first data portion using the substitution table as modified by the XOR operation.