Database Encryption Initialization Vector Embedding

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current data encryption schemes do not adequately manage initialization vectors, leading to increased administrative burdens and potential confidentiality risks in block encryption schemes.

Innovation Solution

A method and device for encrypting data using a block encryption scheme that generates an initialization vector and embeds it within the ciphertext using a specific embedding rule, eliminating the need for separate management of initialization vectors and maintaining confidentiality.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If current encryption schemes are used with separate initialization vector management, then encryption functionality is provided, but administrative burden increases and confidentiality risks arise

Engineering Contradiction:
Improveinitialization vector managementVSAvoidconfidentiality
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent combines the initialization vector and ciphertext into a single encrypted data structure. The initialization vector is embedded within the ciphertext blob, eliminating the need for separate storage and management of the initialization vector, thereby reducing administrative burden while maintaining confidentiality through unified encryption.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The encrypted data structure serves multiple functions: it contains both the ciphertext and the initialization vector, and the embedded initialization vector can be extracted and used for decryption. This multi-functional design eliminates the need for separate initialization vector management systems.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Ease of manufacture

If initialization vectors are managed separately from ciphertext, then encryption processes are simplified, but administrative complexity increases

Engineering Contradiction:
Improveencryption processVSAvoidinitialization vector management system
Core Design Contradiction:
Ease of manufactureVSDevice complexity

Solution Approach 1:

The patent merges the initialization vector and ciphertext into a single unified structure. The encryption process remains simple as it uses standard block cipher operations, while the management complexity is reduced by eliminating separate initialization vector storage, retrieval, and synchronization systems.

Inventive Principle:
Principle #5Merging (Combining)

3Quantity of substance

If initialization vectors are not embedded in ciphertext, then storage space is saved, but management overhead increases

Engineering Contradiction:
Improvestorage spaceVSAvoidinitialization vector management
Core Design Contradiction:
Quantity of substanceVSEase of operation

Solution Approach 1:

The patent embeds the initialization vector within the ciphertext structure, adding minimal overhead (the size of the initialization vector itself) but eliminating the need for separate management systems. The encrypted data is stored as a single blob containing both components, simplifying storage and retrieval operations.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS11539505B2Encrypting data
Publication Date: 2022.12.27 KYNDRYL INC
  • US11539505B2 patent drawing
  • US11539505B2 patent drawing
  • US11539505B2 patent drawing

AI summary

A method and system. An instruction to encrypt plaintext to generate encrypted data from the plaintext is received. The encrypted data is to be stored in a database device in response to a first request received from a client terminal to store the plaintext in the database device. The first request includes the plaintext. Ciphertext is generated by applying both an initialization vector and an encryption key directly to the plaintext. An embedding rule used to generate the encrypted data is selected from a sequence of embedding rules. The encrypted data is stored in the database device, A second request to receive the plaintext data is received from the client terminal. The plaintext is obtained from the encrypted data, by separating the encrypted data into the ciphertext and the initialization vector; and generating the plaintext by decrypting the ciphertext that was separated from the encrypted data.