Dual Encryption Storage for Security-Performance Trade-offs

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The use of cache storage devices with primary storage devices to improve system performance is hindered by the performance degradation caused by encrypting data at both locations, which compromises security when using strong encryption-decryption approaches.

Innovation Solution

Implementing different encryption-decryption approaches for the primary and cache storage devices, where the primary storage device uses a more secure but processing-intensive method, and the cache storage device uses a faster but less secure method, ensuring data security and performance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data is encrypted at both primary storage device and cache storage device using strong encryption-decryption approaches, then data security is improved, but system performance deteriorates due to processing intensity

Engineering Contradiction:
Improvedata securityVSAvoidsystem performance
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent applies different encryption approaches to different storage locations based on their specific characteristics. The primary storage device uses strong encryption-decryption approaches for maximum security, while the cache storage device uses faster but less secure approaches. This local differentiation resolves the contradiction by optimizing security and performance for each specific storage context rather than applying a uniform encryption strategy throughout the system.

Inventive Principle:
Principle #3Local quality

2Speed

If cache storage device is used to improve system performance, then data access speed is improved, but data security is compromised when using faster but less secure encryption methods

Engineering Contradiction:
Improvedata access speedVSAvoiddata security
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The patent changes the encryption parameters (security strength vs. processing speed) based on the storage location and data access patterns. For the cache storage device, it selects encryption parameters that favor speed over maximum security, while the primary storage device uses parameters optimized for security. This parameter adjustment resolves the contradiction by allowing the cache to provide fast access without being constrained by the heavy processing requirements of strong encryption.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If strong encryption-decryption approach is used at primary storage device, then data security is improved, but processing time increases

Engineering Contradiction:
Improvedata securityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent performs encryption at the primary storage device before data is transferred to the cache storage device. This preliminary encryption action ensures that data is secured at the primary storage location using strong methods, while subsequent cache operations can use faster decryption approaches. The time-consuming strong encryption is performed in advance, allowing the cache to operate more quickly without compromising overall security.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8726044B2Encrypting data on primary storage device and on cache storage device
Publication Date: 2014.05.13 HEWLETT PACKARD ENTERPRISE DEV LP
  • US8726044B2 patent drawing
  • US8726044B2 patent drawing
  • US8726044B2 patent drawing

AI summary

A primary storage device stores a first encrypted version of data. The first encrypted version of the data is encrypted in accordance with a first encryption-decryption approach. A cache storage device for the primary storage device stores a second encrypted version of the data. The second encrypted version of the data is encrypted in accordance with a second encryption-decryption approach different than the first encryption-decryption approach.