Data Management Device Using Dummy Data Insertion and Position Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The communication system disclosed in Patent Literature 1 is vulnerable to data confidentiality breaches when the third party knows the function of the common data generator, allowing them to determine the insertion position and common key, thereby recovering the transmission target data from dummy-inserted data.
Innovation Solution
A data management device that determines the insertion position of dummy data, inserts it into the transmission target data, and encrypts the insertion position with a public key, creating secure data that is difficult for a third party to reverse without the corresponding secret key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If dummy data is inserted into transmission target data using a common data generator, then data can be kept secure from third parties, but the system becomes vulnerable when the third party knows the function of the common data generator
Solution Approach 1:
The patent divides the security mechanism into two independent parts: (1) dummy data insertion based on common data, and (2) encryption of the insertion position using public key cryptography. This segmentation ensures that even if one part is compromised, the other remains secure. The insertion position encryption is performed separately from the dummy data insertion process, creating independent security layers.
Solution Approach 2:
The patent combines two different security approaches into a composite security system: traditional dummy data insertion (based on common data generators) and modern public key encryption. This composite approach leverages the strengths of both methods while mitigating their individual weaknesses, creating a more robust security system that remains effective even when one component is compromised.
2Ease of operation
If the insertion position and common key are determined based on common data from a common data generator, then the sender and recipient can share the same security parameters, but the third party can easily determine these parameters by analyzing the device
Solution Approach 1:
The patent introduces public key encryption as an intermediary layer between the common data generator and the insertion position. Instead of directly using the common data to determine the insertion position (which is vulnerable to analysis), the system uses public key encryption to obscure the relationship. The encrypted insertion position acts as a mediator that preserves the functionality of position sharing while preventing direct observation and analysis by third parties.
Solution Approach 2:
The patent transforms the insertion position from a directly observable parameter to an encrypted parameter. By applying public key encryption to the insertion position, the system changes the state of this parameter from plaintext to ciphertext, making it mathematically infeasible for third parties to determine the actual insertion position even with full access to the device and common data generator information.
Data Source
AI summary
A data management device (10) includes an insertion position determiner (121) to determine an insertion position of dummy data to be inserted into transmission target data, a dummy data inserter (122) to insert the dummy data in the insertion position of the transmission target data to create dummy-inserted data, an insertion position encryptor (123) to encrypt data indicating the insertion position with a public key (PUBa) to create insertion-position-encrypted data; and a deliverer (110) to deliver the dummy-inserted data and the insertion-position-encrypted data.