Encrypted Data Processing System with Dual-Key Cipher Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encrypted data processing systems lack secrecy when comparing input information, as comparison results are not encrypted, compromising security.
Innovation Solution
An encrypted data processing system and method where input information is encrypted using two different keys, allowing comparison without decryption, with a server employing a cipher comparison function to compare encrypted data and a decryption function to determine matching, maintaining secrecy by keeping the comparison result encrypted until decryption at the encryption device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encrypted information is compared without decryption, then security is improved, but the secrecy of comparison results is lost
Solution Approach 1:
The patent introduces an intermediary encryption layer for the comparison result itself. The server encrypts the comparison result using the second encryption key before transmitting it to the encryption device. This mediator encryption mechanism ensures that even the comparison result, which is inherently sensitive information, remains confidential during transmission and storage, thus resolving the contradiction between enabling comparison and maintaining secrecy.
Solution Approach 2:
The patent changes the encryption parameter state by using different encryption keys for different purposes: the first encryption key for encrypting original information, and the second encryption key for encrypting comparison results. This parameter differentiation allows the system to maintain multiple layers of security with appropriate secrecy levels for different data types, solving the contradiction by adapting encryption parameters to specific functional requirements.
2Reliability
If double encryption is applied to registration data, then security against unauthorized manipulation is improved, but device complexity increases
Solution Approach 1:
The patent segments the encryption process into distinct functional modules: an encrypting section that handles original information encryption with the first key, and a comparison result decrypting section that handles comparison result decryption with the second key. This segmentation allows each module to have a specific, simplified function, reducing overall device complexity while maintaining double encryption security benefits.
Solution Approach 2:
The encryption device performs self-service by autonomously generating and managing both encryption keys and their corresponding decryption functionality. The device encrypts its own registration data and decrypts its own comparison results without requiring external key management infrastructure, thereby reducing system complexity while maintaining security.
Data Source
AI summary
An encrypted data processing system is provided including an encryption device and a server. The encryption device includes an encrypting section that encrypts first information based on a first encryption key and transmits the encrypted information for registration to the server, and encrypts second information based on a second encryption key and transmits the encrypted information to be compared to the server. The server includes a comparison section that employs a cipher comparison function for comparing encrypted information to compare the encrypted information for registration against the encrypted information to be compared, and transmits a comparison result to the encryption device. The encryption device further includes a comparison result decrypting section that employs a decryption function for decrypting the comparison result with the first encryption key and the second encryption key to find a degree of matching between the first information and the second information.