Dual Randomization Storage Encoding for Secure Data Identification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current storage methods, based on the Shannon model, face inefficiencies in managing exponentially growing data volumes and fail to ensure secure identification and secrecy, particularly in applications requiring high data security and identification processes as introduced by Ahlswede and Dueck in 1989.
Innovation Solution
A method for operating storage means involves applying a dual randomization process to data items, where the first randomization is public and the second is based on a PUF signature, ensuring secrecy, and using an encoding process that generates a randomized encoded storage item, which is then stored and identified using helper data and helper messages, allowing for secure storage and identification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If traditional Shannon model storage methods are used, then data storage capacity increases exponentially with block length, but data security and identification reliability deteriorate due to inability to ensure secrecy against eavesdroppers
Solution Approach 1:
The encoded storage item is segmented into multiple components: public helper data, private helper message, and encrypted image of common randomness. This segmentation allows different parts to serve different functions - public access for efficiency while private components maintain security, resolving the contradiction between storage capacity and security.
Solution Approach 2:
Helper data and helper messages act as intermediaries between the stored data and the identification process. These intermediaries enable efficient retrieval and identification while the encrypted common randomness serves as a secret intermediary that prevents eavesdroppers from gaining information, thus maintaining both capacity and security.
2Productivity
If public randomization is applied for efficient storage, then storage and retrieval efficiency improves, but secrecy is compromised making the system vulnerable to eavesdroppers
Solution Approach 1:
Different parts of the encoded storage item have different quality properties - the helper data is public and optimized for efficiency, while the helper message and encrypted common randomness are private and optimized for security. This local differentiation allows the system to achieve both efficiency and secrecy simultaneously.
Solution Approach 2:
The encoded storage item is a composite structure combining public helper data with private helper messages and encrypted common randomness. This composite structure integrates both efficient public access capabilities and secure private protection, resolving the contradiction between productivity and security vulnerability.
3Reliability
If identification processes are made more secure using PUF signatures, then secrecy and security improve, but system complexity and computational overhead increase
Solution Approach 1:
The common randomness is generated and encrypted in advance during the encoding phase, before any identification operations are needed. This preliminary action prepares the security mechanisms beforehand, so that during identification only simple decryption and comparison operations are required, reducing real-time computational overhead while maintaining high security.
Data Source
AI summary
A method of operating a storage means, wherein for writing and storing a storage item to the storage means the storage item to be written and stored—in particular by using the concept and theory of identification—is provided, a encoding process by means of randomization is applied to the storage item to generate and to provide a randomized encoded storage item, and the randomized encoded storage item is written and stored to the storage means. At least a first randomization process is underlying the encoding process and is a randomization process dedicated and assigned to the underlying storage means. The present disclosure further refers to a unit for operating a storage means, to a storage means and to a system for processing data. By having two randomization processes underlying the encoding process, a distinction can be made between a secrecy insuring and secrecy non-ensuring randomization processes.