Dynamic Key Table Encryption for Data Confidentiality
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional encryption communication methods rely on a fixed session key, which compromises data confidentiality if revealed, as the session key is used for the entire session duration without change.
Innovation Solution
A data encryption and decryption apparatus and method that generate a session key using a key exchange protocol, and utilize multiple key tables and cipher algorithms to encrypt and decrypt data, including a primary cipher algorithm and an independent key table or cipher key, to enhance security by changing encryption methods within a session.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a fixed session key is used for the entire session duration, then encryption communication can be performed efficiently, but data confidentiality is compromised if the session key is revealed
Solution Approach 1:
The patent segments the encryption process by dividing data into multiple portions and encrypting each portion with different cipher algorithms and key tables. The session key is used to generate multiple key tables rather than relying on a single fixed key, thereby maintaining efficiency while enhancing confidentiality through segmented encryption approaches.
Solution Approach 2:
The patent introduces dynamic key management by generating multiple key tables from the session key and switching between different cipher algorithms during the session. This dynamic approach allows the encryption method to change throughout the session, preventing the confidentiality issues associated with fixed keys while maintaining operational efficiency.
2Reliability
If multiple key tables and cipher algorithms are used to encrypt data, then data confidentiality is enhanced even if the session key is compromised, but the device complexity increases
Solution Approach 1:
The patent applies preliminary action by pre-generating multiple key tables from the session key at the beginning of the communication session. These key tables are prepared in advance and stored for use during data encryption, eliminating the need for complex real-time key generation operations and reducing overall system complexity while maintaining enhanced confidentiality.
Solution Approach 2:
The patent changes encryption parameters by switching between different cipher algorithms and key tables based on the data portion being encrypted. This parameter-based approach allows the system to achieve high security through multiple encryption methods without requiring fundamentally different cryptographic systems, thereby managing complexity through parameter variation rather than structural complexity.
Data Source
AI summary
Disclosed are an apparatus and method for data encryption and an apparatus and method for data decryption. The data encryption apparatus includes a key exchanger configured to generate a session key using a key exchange protocol, a cipher key generator configured to generate at least one of a cipher key and a key table from the session key, and an encryptor configured to encrypt data with the at least one of the cipher key and the key table generated from the session key.