Distributed Encryption Offloading Mainframe Processing Load
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Encrypting large data sets on mainframe networks is processing-intensive and costly, as existing methods require significant computational resources, which can be prohibitive for large-scale data encryption.
Innovation Solution
A distributed encryption system where the mainframe network exports data to a distributed network for encryption, utilizing format-preserving encryption and secure transport mechanisms like SFTP, to offload processing demands and reduce costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted on the mainframe network, then data security is improved, but processing time and computational resources increase significantly
Solution Approach 1:
The encryption function is extracted from the mainframe network and placed in the distributed network. The mainframe exports data to the distributed network for encryption, then imports the encrypted data back. This separation allows the mainframe to avoid the computational overhead of encryption while still achieving secure data storage.
Solution Approach 2:
The distributed network acts as an intermediary between the mainframe and the encryption process. Instead of the mainframe directly encrypting data, it exports data through secure transport mechanisms to the distributed network, which performs the encryption and returns the results. This intermediary approach resolves the contradiction by shifting the computational burden.
2Reliability
If data is encrypted on the mainframe network, then data security is improved, but computational resources and costs increase
Solution Approach 1:
The computationally intensive encryption process is extracted from the mainframe and relocated to the distributed network. This extraction eliminates the need for the mainframe to allocate significant computational resources to encryption, thereby reducing energy consumption and operational costs while maintaining security through the distributed network's encryption capabilities.
Solution Approach 2:
The system uses format-preserving encryption that can be applied efficiently to individual data elements without requiring expensive, long-running encryption processes. The encryption is performed on exported data elements and the results are immediately imported back, creating a efficient, low-cost encryption approach that doesn't burden the mainframe's computational resources.
3Reliability
If bulk encryption is performed during data migration, then data security is improved, but mainframe requirements and costs increase
Solution Approach 1:
The bulk encryption operation is extracted from the mainframe's core functions and performed in the distributed network. During data migration, the mainframe simply exports data to the distributed network for encryption and imports the encrypted data back. This extraction prevents the mainframe from requiring enhanced processing power, memory, or other hardware upgrades that would otherwise be needed for bulk encryption.
Solution Approach 2:
The encryption process is segmented into separate stages: export from mainframe, encryption in distributed network, and import back to mainframe. This segmentation allows the mainframe to maintain its existing capabilities while the distributed network handles the encryption workload, avoiding the need to increase mainframe complexity or requirements.
Data Source
AI summary
A mainframe network may store a plurality of records. The mainframe network may generate a file comprising the data elements in the records. The mainframe network may transmit the file to a distributed network. The distributed network may encrypt the data elements. The distributed network may transmit a file comprising the encrypted data elements to the mainframe network. The mainframe network may store the encrypted data elements.