Difference Data Encryption for Secure Software Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge is to efficiently transmit updated data while minimizing bandwidth usage and communication costs, especially when the data files before and after updates are encrypted and signed, as the difference between them may not be correlated, leading to increased transmission times and costs.
Innovation Solution
An information processing apparatus and method that generates difference data between a first and second data set, encrypts this difference data, and includes an electronic signature of the second data set in the transmission data, allowing the recipient to verify the updated data set by applying the difference data to the original data set using the received signature.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the entire updated data file is transmitted, then data integrity and security are maintained, but bandwidth usage and communication costs increase
Solution Approach 1:
The patent segments the data transmission by transmitting only the difference file containing changes between versions, rather than the entire updated data file. This allows the recipient to reconstruct the updated data by applying differences to the original data, significantly reducing bandwidth usage while maintaining integrity through cryptographic signing of the difference file.
Solution Approach 2:
The patent extracts only the essential change information from the updated data file and transmits this extracted difference data separately. The difference file contains only the modifications needed to transform the original data into the updated version, eliminating redundant data transmission while preserving integrity through digital signatures.
2Loss of energy
If difference files are used to reduce transmission size, then bandwidth usage decreases, but security and data integrity cannot be maintained when data is encrypted and signed
Solution Approach 1:
The patent applies preliminary action by pre-computing and pre-signing the difference file with a digital signature before transmission. This allows the recipient to verify the integrity and authenticity of the difference data without needing to transmit or verify the entire original data file, maintaining security while reducing bandwidth usage.
Solution Approach 2:
The patent introduces a digital signature as an intermediary mechanism that bridges the difference file with the original data. The signature verifies that the difference file is authentic and has not been tampered with, allowing secure transmission of only the essential change information without compromising data integrity or security.
3Quantity of substance
If large data files are transmitted in entirety, then no data loss occurs, but transmission time and communication costs increase
Solution Approach 1:
The patent applies partial action by transmitting only the necessary difference data required to update the original file, rather than the entire updated file. This partial transmission approach reduces the quantity of data sent while ensuring that all necessary changes are included in the difference file, thereby reducing transmission time without causing data loss.
Data Source
AI summary
A differencing generator generates difference data between a first data set and a second data set. An encryption unit encrypts data. An electronic signature generator generates the electronic signature of data. A transmission data generator generates transmission data. The encryption unit encrypts the difference data generated by the differencing generator so as to generate encrypted difference data. The transmission data generator generates transmission data containing both the encrypted difference data generated by the encryption unit and the electronic signature of the second data set as generated by the electronic signature generator.