Dissociative Data Storage Fragmentation and Obfuscation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data security solutions are static and vulnerable to unauthorized access, particularly in relational data models where individual data records are linked by common identifiers, leading to potential breaches and increased security risks from incompatibilities between different security mechanisms.
Innovation Solution
A dissociative storage scheme that decomposes data objects into fragments, encrypts each fragment with cascading encryption keys, obfuscates record locators, and distributes them across multiple storage locations, using variable storage parameters and dynamic computations for secure storage, access, and transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored using standard relational data models with common record locators, then data access and retrieval are simplified, but security is compromised as unauthorized access to one record can expose linked records
Solution Approach 1:
The patent decomposes data objects into multiple fragments and stores them in separate storage locations. Each fragment is associated with a unique obfuscated record locator, eliminating the common record locator that links records in relational models. This segmentation prevents unauthorized access to complete data while maintaining access capabilities through the dissociative structure.
2Reliability
If multiple data security mechanisms are combined at a single storage location, then data security is enhanced, but incompatibilities between mechanisms create additional security risks
Solution Approach 1:
The patent applies segmentation by distributing data fragments across multiple storage locations rather than combining multiple security mechanisms at a single location. Each fragment can have its own encryption and security measures independently applied, eliminating integration incompatibilities while maintaining comprehensive security through the distributed architecture.
3Reliability
If data is decomposed into fragments and distributed across multiple storage locations, then security is improved by isolating breaches, but storage and retrieval complexity increases
Solution Approach 1:
The patent implements segmentation by dividing data objects into fragments stored at different locations, which isolates security breaches to individual fragments. The dissociative storage scheme manages the complexity through systematic fragment identification and reconstruction processes that automate the retrieval operation.
Solution Approach 2:
The patent employs a nested structure where data fragments are organized hierarchically with obfuscated record locators that encode fragment identification information. This nesting allows the system to manage multiple fragments and their locations without linearly increasing operational complexity, as the obfuscated locators contain embedded routing information.
4Ease of manufacture
If conventional static security mechanisms are deployed, then implementation is straightforward, but security breaches can compromise entire data storage locations
Solution Approach 1:
The patent applies segmentation by distributing data across multiple storage locations with each location holding only fragments. This eliminates the single point of failure inherent in conventional static security, as a breach at one location only exposes fragmented data that cannot be reconstructed without other fragments from different locations.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for storing a first data object includes: decomposing the first data object into a first fragment associated with a first original record locator and a second fragment associated with a second original record locator; obfuscating the first original record locator to generate a first obfuscated record locator and the second original record locator to generate a second obfuscated record locator; encrypting the first fragment using a first encryption key and the second fragment using a second encryption key; and storing, to at least a first of a plurality of storage locations, the first encrypted fragment with the corresponding first obfuscated record locator and the second encrypted fragment with the second obfuscated record locator.