Data-Size-Based Encryption Key Selection for Secure Password Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the process of transferring a user-input password to a password processing module, the password can be copied multiple times in memory, making it vulnerable to exposure by attackers, compromising security.
Innovation Solution
An electronic device with a memory divided into a normal and secure area, where data is temporarily stored in the normal area, its information quantity is identified, and a key is selected based on this quantity to encrypt the data, which is then transmitted to the secure area for access authority.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the password is transferred through the memory multiple times, then the password processing can be completed, but the security is compromised due to password exposure
Solution Approach 1:
The memory is divided into a normal area and a secure area. The normal area stores data in plaintext temporarily during processing, while the secure area stores encrypted data and encryption keys. This segmentation allows the system to complete necessary data transfers while isolating sensitive information in the secure area, preventing exposure even if the normal area is compromised.
Solution Approach 2:
An encryption module acts as an intermediary between the normal area and secure area. It encrypts data before storing it in the secure area and manages key storage, ensuring that plaintext passwords are not exposed in the normal area during transfers. This intermediary mechanism resolves the contradiction by enabling data processing while maintaining security through encryption.
2Reliability
If a larger encryption key is used, then the security is improved, but the encryption speed decreases
Solution Approach 1:
The system dynamically adjusts the encryption key size based on the importance and sensitivity of the data being encrypted. For less sensitive data, smaller key sizes (e.g., 128-bit) are used to maintain fast encryption speeds. For highly sensitive data such as passwords, larger key sizes (e.g., 256-bit) are employed to ensure maximum security. This parameter adjustment resolves the contradiction by matching key size to data sensitivity requirements.
Solution Approach 2:
The encryption system transitions from static key size selection to dynamic key size adaptation. The encryption module automatically selects appropriate key sizes based on data classification and security requirements, enabling the system to optimize between security and speed in real-time根据不同 data characteristics, rather than using a fixed key size for all operations.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In an electronic device and an operation method of the electronic device according to various embodiments, the electronic device comprises: a user interface; a processor operatively connected to the user interface; and a memory operatively connected to the processor and including a general area and a secure area, wherein the memory is configured to store a plurality of keys for encrypting data corresponding to a user's input, and the memory may store instructions that, when executed, cause the processor to: receive the data through the user interface; non-transitorily store the received data in the general area; check the amount of information of the stored data; select at least one key from among the plurality of keys stored in the memory on the basis of at least a portion of the checked amount of information; encrypt the data by using the selected key; and transmit the encrypted data and information indicating the selected key to the secure area requiring access authority.