Encrypted Logical Data Object Layout for Faster Secure Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current storage technologies face challenges in securely storing data by efficiently encrypting and compressing logical data objects while maintaining minimal impact on accessibility and manageability, with existing solutions often compromising on either security or performance.
Innovation Solution
A method and system that encrypt plaintext logical data objects by breaking them into fixed-size segments, using a secure key combined with an initialization vector, and mapping processed chunks into encrypted sections with an index section for efficient storage and retrieval, allowing for secure storage with minimal performance impact.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted using secure keys and initialization vectors, then security is improved, but processing time and computational resources increase
Solution Approach 1:
The patent divides plaintext data into fixed-size segments or chunks before encryption. This segmentation allows the encryption process to work on smaller, manageable units in parallel, reducing overall processing time while maintaining security through consistent application of encryption algorithms to each segment with unique initialization vectors.
Solution Approach 2:
The system performs preliminary actions by pre-generating initialization vectors and preparing encryption keys before the actual encryption process. This pre-computation of cryptographic parameters reduces the computational burden during data encryption, thereby reducing processing time while maintaining security standards.
2Quantity of substance
If data is compressed to optimize storage capacity, then storage efficiency is improved, but decompression time and processing overhead increase
Solution Approach 1:
The patent applies compression to segmented data chunks rather than entire data sets. This allows compression algorithms to work efficiently on smaller units with better compression ratios, while the segmented structure enables parallel decompression operations, reducing overall decompression time while maximizing storage efficiency.
3Reliability
If complex encryption algorithms are used to enhance security, then data protection is improved, but system complexity and computational overhead increase
Solution Approach 1:
The patent simplifies system complexity by dividing the encryption process into segments, each handling fixed-size data chunks with standardized encryption routines. This modular approach makes the complex encryption system more manageable and easier to implement while maintaining high security through consistent application of cryptographic algorithms to each segment.
Data Source
AI summary
Systems and methods for encrypting a plaintext logical data object for storage in a storage device operable with at least one storage protocol, creating, reading, writing, optimization and restoring thereof. Encrypting the plaintext logical data object comprises creating in the storage device an encrypted logical data object comprising a header and one or more allocated encrypted sections with predefined size; encrypting one or more sequentially obtained chunks of plaintext data corresponding to the plaintext logical data object thus giving rise to the encrypted data chunks; and sequentially accommodating the processed data chunks into said encrypted sections in accordance with an order said chunks received, wherein said encrypted sections serve as atomic elements of encryption/decryption operations during input/output transactions on the logical data object.