Encrypted Data Integrity Verification via Authorized Access Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data integrity verification methods are inadequate in ensuring the accuracy and security of data integrity, particularly in cryptographic operations where minor corruption can lead to significant errors, and existing solutions do not effectively limit access to information that could facilitate cryptographic attacks.

Innovation Solution

Incorporating a plaintext data integrity value (PDIV) that is encrypted alongside the data, ensuring that only authorized entities can access and verify the integrity of the data, using cryptographic hash algorithms like SHA-256, and structuring data to enable detection of integrity values during decryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If data is transmitted through multiple network components and operations, then data can be processed and delivered, but the probability of data corruption increases significantly

Engineering Contradiction:

Improvedata transmission efficiencyVSAvoiddata integrity

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

A data integrity value is generated and attached to the data before transmission begins. This preliminary action allows verification to be prepared in advance, so that when data arrives after passing through multiple network components, its integrity can be immediately verified without adding transmission delay.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The data integrity verification mechanism provides feedback by comparing the received data against the pre-generated data integrity value. This feedback loop detects corruption that may have occurred during transmission through multiple network components, allowing the system to identify and handle corrupted data.

Inventive Principle:

Principle #23Feedback

2Measurement precision

If plaintext data integrity values are made accessible for verification, then data integrity can be verified, but cryptographic attacks may be facilitated

Engineering Contradiction:

Improveintegrity verification accuracyVSAvoidcryptographic attack risk

Core Design Contradiction:

Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The data integrity value is extracted and attached to the data in a separate, identifiable format during the encryption process. This extraction allows the integrity verification to be performed on the ciphertext without requiring access to the plaintext, thereby maintaining verification capability while preventing cryptographic attacks that would require plaintext exposure.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent uses an intermediary mechanism where the data integrity value is processed through cryptographic operations along with the ciphertext. This intermediary approach allows verification without directly exposing the plaintext integrity value, creating a protective layer that enables verification while mitigating cryptographic attack risks.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS10567394B2Data integrity verification

Publication Date: 2020.02.18 AMAZON TECH INC

AI summary

A system performs cryptographic operations utilizing information usable to verify validity of plaintext. To prevent providing information about a plaintext by providing the information usable to verify the validity of the plaintext, the system provides the information usable to verify validity of the plaintext to an entity on a condition that the entity is authorized to access the plaintext. The information usable to verify validity of the plaintext may be persisted in ciphertext along with the plaintext to enable the plaintext to be verified when decrypted.