Dynamic Key Generation for Storage Device Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data encryption systems face challenges in protecting authentication data, including increased device costs, complexity due to size limitations, vulnerability to imitation with fixed keys, and key sniffing risks during transmission with non-fixed keys.
Innovation Solution
A data encryption system that randomly generates a device key seed based on operation time or interval, which is used to create and manage dynamic keys for encrypting and decrypting data between a host and storage device, enhancing security and reducing predictability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hardware-based encryption is used, then data security is improved, but device cost increases
Solution Approach 1:
The patent replaces hardware-based encryption with a software-based encryption system. The encryption/decryption module is implemented as software that generates keys dynamically using algorithms, eliminating the need for expensive hardware security modules while maintaining security through software-based key management and encryption operations.
Solution Approach 2:
The patent uses disposable, easily generated key pairs for each encryption operation. Instead of relying on expensive, permanent hardware security infrastructure, the system generates new encryption keys through software algorithms, making the security mechanism cheaper and more flexible.
2Reliability
If hardware-based encryption is used, then data security is improved, but device complexity increases
Solution Approach 1:
The patent replaces complex hardware security modules with a streamlined software-based encryption system. The encryption/decryption module uses software algorithms to generate keys and perform encryption, reducing hardware complexity while maintaining security functionality.
3Productivity
If fixed key encryption is used, then encryption speed is improved, but security against imitation decreases
Solution Approach 1:
The patent transitions from static fixed keys to dynamic keys that change with each encryption operation. The encryption key is generated dynamically based on a master key and operation-specific parameters, making the encryption process adaptive and resistant to imitation while maintaining efficient software-based encryption speed.
Solution Approach 2:
The patent changes the encryption key parameters dynamically for each operation. Instead of using a constant fixed key, the system generates different key values based on the master key and operation context, preventing replay attacks and imitation while maintaining encryption efficiency through algorithmic key generation.
4Reliability
If non-fixed key encryption is used, then security against imitation is improved, but key transmission vulnerability increases
Solution Approach 1:
The patent extracts the master key from transmission entirely. Instead of transmitting the master key or dynamic keys over the network, the system keeps the master key localized in the encryption/decryption module and generates operation-specific keys locally, eliminating the key transmission vulnerability while maintaining security against imitation.
Solution Approach 2:
The patent uses an intermediary approach where the master key never leaves the encryption/decryption module. The system mediates between security requirements and transmission safety by generating derived keys locally without transmitting sensitive key material, thus preventing key sniffing while achieving dynamic encryption.
Data Source
AI summary
Data encryption systems and methods. The system includes a storage device storing data and an encryption/decryption module. The encryption/decryption module randomly generates a device key seed according to the occurrence time of a specific operation or the interval between two specific operations on the storage device, and applies the device key seed to data encryption.