Dual-Key Cryptographic System for Efficient Key Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems face inefficiencies in encryption and decryption processes when updating encryption keys, leading to increased data size and prolonged decryption times due to the need for re-encryption and sequential decryption of data encrypted with multiple keys.
Innovation Solution
A cryptographic system that employs a dual-key encryption method, where data is encrypted with both a main key and a sub key, allowing for key updates by shifting or inverting bits without decrypting the data, thus maintaining data size and reducing the load on the system during key updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is re-encrypted with a new key by obtaining and decrypting all data, then the key is updated securely, but the process takes time and interferes with service provision
Solution Approach 1:
The encryption key is divided into two parts: a first key for encrypting data and a second key for encrypting the first key. This segmentation allows the second key to be updated independently without requiring decryption and re-encryption of the actual data, thus maintaining security while enabling faster key updates that do not interfere with service provision.
2Reliability
If data is encrypted with encryption keys manyfold, then security is enhanced, but decryption time increases
Solution Approach 1:
The second key encryption layer is extracted as a separate component that can be updated and managed independently from the data encryption process. This extraction allows the first key to continue decrypting data efficiently while the second key provides an additional security layer that does not add to the decryption time burden on the client side.
3Loss of information
If data size increases with each key update, then key version tracking is maintained, but storage efficiency decreases
Solution Approach 1:
The second key is nested within the encryption structure as a wrapper around the first key, rather than creating separate encrypted copies of the entire data set for each key version. This nesting approach maintains key version information efficiently without causing exponential growth in data size, as the second key remains a compact metadata element.
Data Source
AI summary
A cryptographic system that can prevent encryption and decryption processes from being inefficient as an encryption key is updated is provided. The cryptographic system includes: a first encryption unit for encrypting original data in a first encryption method using a main key to generate first encrypted data; a second encryption unit for encrypting the first encrypted data in a second encryption method using a sub key to generate second encrypted data; a database for storing the second encrypted data generated; a key update unit for updating the current version of the main key to a new version of the main key and updating the current version of the sub key to a new version of the sub key; and a data update unit for converting the second encrypted data encrypted with the current version of the sub key into a state encrypted with the new version of the sub key.