Data Block Encryption for Secure Physical Media Transfers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need to secure physical-storage-media data transfers, particularly for large or sensitive data that may be at risk of leakage during network transfers, and to ensure that only authorized media are used for secure data storage.
Innovation Solution
A computing system that generates and manages physical-storage-media identifiers for approved storage media, allowing only authorized data writes and maintaining logs to track usage, and divides sensitive data into encrypted blocks for secure transfer across multiple physical media or networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is transferred via physical storage media, then security against network interception is improved, but risk of physical media tampering and unauthorized access increases
Solution Approach 1:
The patent divides data into multiple separate blocks and stores each block on different physical storage media. This segmentation ensures that even if one media is tampered with or compromised, the complete data remains secure as all blocks are required for reconstruction. The data blocks are distributed across multiple media to mitigate the harmful effects of physical tampering.
Solution Approach 2:
The patent employs a composite security approach by combining physical storage media with cryptographic encryption. Each data block is encrypted before being stored on physical media, creating a composite protection system that leverages both physical and digital security mechanisms to counteract tampering risks.
2Reliability
If data is divided into multiple blocks and stored on different physical media, then security against complete data compromise is improved, but system complexity increases
Solution Approach 1:
The patent creates a universal data block structure that can be stored on any physical storage media type. Each data block contains metadata including a block identifier and cryptographic authentication tags, making the system universally applicable across different media while maintaining consistent security and management procedures.
Solution Approach 2:
The patent implements feedback mechanisms through authentication tags and block identifiers that are verified during data reconstruction. This feedback system automatically detects tampering or corruption and provides information about the integrity of each block, simplifying management by enabling automated verification rather than manual checking.
3Reliability
If physical storage media identifiers are tracked and logged, then unauthorized media usage is prevented, but processing overhead increases
Solution Approach 1:
The patent performs preliminary actions by pre-registering authorized physical storage media identifiers in a database before data transfer. This preliminary registration creates an authorization list that enables rapid verification during actual data operations, reducing processing time compared to performing full authentication checks during each transfer operation.
Solution Approach 2:
The patent creates a copy or representation of the physical media identifier (such as a hash or encoded form) that can be quickly compared against the authorized list. This copied representation enables fast verification without requiring complex analysis of the actual physical media, reducing processing overhead while maintaining security.
Data Source
AI summary
Aspects of the disclosure relate to ensuring information security in data transfers by dividing and encrypting data blocks. A computing platform may receive, from a data source computing device, a source data collection for a secure physical-storage-media data transfer and may identify one or more transmission parameters associated with the secure physical-storage-media data transfer. Subsequently, the computing platform may divide the source data collection into two or more data blocks and may separately encrypt the two or more data blocks based on the one or more transmission parameters to produce two or more encrypted data blocks for the secure physical-storage-media data transfer. Then, the computing platform may store the two or more encrypted data blocks on two or more physical media, and each encrypted data block of the two or more encrypted data blocks may be stored on a different physical medium of the two or more physical media.