Data Compression and Encryption in Storage Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data storage systems face inefficiencies in preventing information leakage through data compression and encryption, as compression techniques reveal valuable information about the data, and combining both processes is challenging due to conflicting goals of pattern removal and pattern preservation.
Innovation Solution
Applying data compression followed by encryption, with the generation and secure storage of system parameter values that include compression and encryption details, and establishing a trusted relationship for secure access and transfer of these parameters.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If data compression is applied to reduce storage space, then storage efficiency is improved, but information leakage increases because compression techniques reveal patterns about the data
Solution Approach 1:
The patent segments the data protection process into two distinct stages: first applying compression to reduce storage space, then applying encryption to the compressed data to eliminate information leakage. This segmentation allows each technique to perform its primary function without interfering with the other, resolving the contradiction between storage efficiency and information security.
Solution Approach 2:
The patent applies compression as a preliminary action before encryption. By compressing the data first and then encrypting the compressed result, the system prepares the data in an optimal state for encryption, ensuring that the encryption operation works on already-compressed data, thereby preventing information leakage while maintaining storage efficiency.
2Reliability
If encryption is applied to protect data confidentiality, then security is improved, but storage efficiency decreases because encrypted data cannot be compressed
Solution Approach 1:
The patent inverts the conventional order of operations by applying compression before encryption, rather than encrypting first and then compressing. This inversion resolves the contradiction because compression operates on the original data structure to maximize compression ratios, while encryption is applied afterward to protect the already-compressed data, ensuring both storage efficiency and confidentiality.
3Ease of operation
If system parameter values are stored openly for host access, then ease of operation is improved, but security decreases because sensitive compression and encryption details are exposed
Solution Approach 1:
The patent introduces an intermediary authentication mechanism between the host and the system parameter values. Instead of allowing direct open access, the system establishes trusted relationships through authentication, acting as an intermediary that controls and filters access to sensitive parameters, thereby maintaining both ease of operation for authorized hosts and security against unauthorized access.
Solution Approach 2:
The patent changes the access parameters for system parameter values from open/public to authenticated/protected. By modifying the access control parameters and requiring authentication, the system maintains ease of operation for legitimate hosts while significantly improving the security and reliability of the stored parameter values.
Data Source
AI summary
Apparatus and method for data security in a data storage environment. In some embodiments, input data from a host is received into a buffer memory. Data compression is applied to the input data to provide compressed data. Encryption is applied to the compressed data to generate encrypted data, and the encrypted data are stored in a main memory of a data storage device. A system parameter value associated with the storage of the encrypted data is generated and stored in a memory, such as the main memory of the storage device. The system parameter value may include information relating to the compression of the data. A trusted relationship is established to authenticate the host responsive to a request for the updated system parameter value. The system parameter value is transferred to the host responsive to the established trusted relationship.