Encrypted Data Block Comparison via Shuffling and Magnitude Embedding

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing data comparison technologies that compare encrypted data risk unauthorized decryption due to potential information leakage from similarity determinations in magnitude comparisons between encrypted values.

Innovation Solution

A data comparison device and method that encrypts data into blocks, shuffles these blocks, and embeds a value indicating the magnitude comparison result, allowing secure comparison without revealing the original data similarity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If encrypted data is compared using magnitude comparison, then comparison function is achieved, but information leakage occurs revealing similarity between encrypted data and original values

Engineering Contradiction:
Improvecomparison functionVSAvoidinformation leakage
Core Design Contradiction:
Ease of operationVSLoss of information

Solution Approach 1:

The encrypted data is divided into multiple blocks, and comparison is performed block by block from most significant to least significant. This segmentation allows the system to determine magnitude relationships without revealing the complete encrypted value, as only partial block comparisons are needed to establish the result.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system performs preliminary comparison actions on individual blocks before determining the final magnitude relationship. By comparing blocks sequentially and stopping when the relationship is determined, the system avoids unnecessary information leakage about less significant blocks that would not affect the final comparison result.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If encrypted data is compared without decryption, then data secrecy is maintained, but unauthorized decryption risk increases due to similarity analysis

Engineering Contradiction:
Improvedata secrecyVSAvoidunauthorized decryption risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system transforms the comparison problem from operating on complete encrypted values to operating on individual blocks of encrypted data. This dimensional change allows comparison functionality while limiting the information available for similarity analysis, as attackers can only observe block-level comparison results rather than relationships between complete encrypted values.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

3Measurement precision

If complete encrypted values are compared, then accurate magnitude comparison is achieved, but more information about encrypted data similarity is revealed

Engineering Contradiction:
Improvemagnitude comparison accuracyVSAvoidencrypted data similarity
Core Design Contradiction:
Measurement precisionVSLoss of information

Solution Approach 1:

The system performs preliminary comparisons on more significant blocks first and stops the comparison process as soon as the magnitude relationship is determined. This means less significant blocks are not compared at all in many cases, providing accurate magnitude comparison while minimizing the amount of information leaked about data similarity.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11971998B2Data comparison device, data comparison system, and data comparison method
Publication Date: 2024.04.30 HITACHI LTD
  • US11971998B2 patent drawing
  • US11971998B2 patent drawing
  • US11971998B2 patent drawing

AI summary

A data comparison device holds first and second encrypted data of first and second plaintext, respectively. The first plaintext is divided into a plurality of blocks and the first encrypted data is generated by executing encryption of each of the plurality of blocks and shuffling of the plurality of blocks. The second plaintext is divided into a plurality of blocks and the second encrypted data is generated by executing encryption of each of the plurality of blocks. In at least one of the first encrypted data and the second encrypted data, a plaintext value is embedded as a value indicating a magnitude comparison result, and the data comparison device compares blocks at the same position before shuffling of the first encrypted data and the second encrypted data based on the embedded value and determines a magnitude relationship between the first plaintext and the second plaintext.