Decentralized Data Fragment Encryption in Trusted Execution Environments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data storage solutions, particularly in cloud computing, face challenges in scaling storage capacity and performance, and ensuring data safety in decentralized storage systems.
Innovation Solution
A data storage method that divides target data into fragments, encrypts them in a trusted execution environment using node information, and stores the encrypted fragments across multiple storage nodes, utilizing a blockchain for metadata management and redundancy to enhance security and availability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If decentralized storage is used to improve storage capacity and data access efficiency, then storage scalability is improved, but data security deteriorates
Solution Approach 1:
The patent divides data into multiple fragments and stores them across different storage nodes. Each fragment is encrypted with node-specific keys, so that no single node holds the complete plaintext data. This segmentation approach enables scalable decentralized storage while maintaining security, as compromising one node does not expose the entire dataset.
Solution Approach 2:
The patent transforms data from its original state through encryption using node information as parameters. Each storage node receives encrypted data fragments with encryption parameters specific to that node, changing the data's state from readable plaintext to encrypted ciphertext that can only be decrypted by the intended node.
2Reliability
If data is encrypted using node information to improve data security, then data safety is improved, but storage system complexity deteriorates
Solution Approach 1:
The patent implements automatic key generation and management where each storage node independently generates its own encryption keys based on its node information. The system automatically handles fragment distribution, encryption, and decryption processes without requiring manual intervention, reducing operational complexity despite the cryptographic operations.
Solution Approach 2:
The patent uses a universal encryption framework that works across all storage nodes in the decentralized network. The same encryption algorithm and protocol are applied throughout the system, with node-specific parameters providing security while maintaining consistent system-wide operations. This universal approach simplifies implementation compared to node-specific custom solutions.
3Device complexity
If single-machine storage is used to simplify storage management, then system complexity is reduced, but storage capacity and performance deteriorate
Solution Approach 1:
The patent segments data storage across multiple machines in a decentralized network, with each node storing only fragments of the complete dataset. This segmentation enables the system to scale storage capacity by adding more nodes while maintaining manageable complexity at each individual node through automated fragment distribution and encryption.
Data Source
AI summary
Provided are a data storage method, a device, and a storage medium. The implementation scheme is as follows: target data to be stored is divided into data fragment original texts, and storage nodes are allocated for the data fragment original texts; in a trusted execution environment, the data fragment original texts are encrypted according to node information of the storage nodes to obtain data fragment cipher texts associated with the storage nodes; and the data fragment cipher texts are stored to the storage nodes.