Data Encryption Index Security via Adjacent Block Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data encryption schemes fail to ensure data reliability as they do not effectively verify the validity of decrypted data, allowing hostile attackers to falsify encrypted data, which cannot be distinguished from genuine data by the decrypting party.
Innovation Solution
A method and apparatus that encrypt data by generating a ciphertext block sequence, where each block includes a data ciphertext and an index ciphertext, and decrypting data by verifying the index values of adjacent blocks to ascertain data validity, using a preset security key and hash operations to ensure index security and prevent data falsification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If symmetric or asymmetric encryption method is used to convert data into ciphertext, then data confidentiality is improved, but data reliability deteriorates because the decrypting party cannot determine the validity of decrypted plaintext data
Solution Approach 1:
The patent segments the encrypted data into multiple ciphertext blocks, where each block contains both encrypted data and an index component. This segmentation allows the index to be independently verified against adjacent blocks, enabling validity verification without compromising the overall encryption security.
Solution Approach 2:
The patent introduces an index as an intermediary element that mediates between the encrypted data and the verification process. The index is encrypted using a key derived from adjacent data blocks, creating a chain of trust that allows verification of data validity without exposing the main encryption key or plaintext data.
2Reliability
If encryption key is used to encrypt data, then data security is improved, but security against key theft deteriorates because stolen keys allow attackers to falsify encrypted data
Solution Approach 1:
The patent implements dynamic key derivation where the encryption key for each block is not static but derived dynamically from the data of adjacent blocks through hash functions. This dynamic approach means that even if one key is compromised, it cannot be used to decrypt or falsify other blocks, as each key is uniquely tied to its adjacent data context.
Solution Approach 2:
The patent performs preliminary hashing of adjacent data blocks to generate encryption keys before the actual encryption process. This preliminary action creates a dependency chain where the validity of each encrypted block is pre-linked to its neighbors, enabling later verification of data authenticity without requiring the original plaintext.
3Reliability
If index encryption is implemented for each data block, then index security is improved, but device complexity increases due to additional encryption operations
Solution Approach 1:
The patent makes the encryption system universal by using the same encryption framework for both the main data and the index components. The same cryptographic primitives and key derivation mechanisms are applied throughout, which simplifies implementation compared to using separate encryption systems, even though multiple encryption operations are performed.
Solution Approach 2:
The patent implements a nested structure where the index encryption keys are nested within the data encryption process itself. The keys for indexing are derived from the same data blocks that are being encrypted, creating a hierarchical dependency that reduces the need for separate key management systems and reduces overall system complexity.
Data Source
AI summary
The disclosure discloses a method and apparatus for encrypting data, and a method and apparatus for decrypting data. The method for encrypting data includes: acquiring a to-be-encrypted data block; executing a first encryption on the to-be-encrypted data block to obtain a data ciphertext; executing a hash operation on the to-be-encrypted data block to obtain an index key; designating a last ciphertext block as a first target ciphertext block, and decrypting the first target ciphertext block to acquire an index value of the first target ciphertext block; executing a preset operation on the index value of the first target ciphertext block to obtain the index value of the to-be-encrypted data block, and executing a second encryption on the index value of the to-be-encrypted data block based on the index key to generate an index ciphertext; and combining the data ciphertext and the index ciphertext to generate a ciphertext block.