Encrypted Data Migration via Envelope Key Extraction

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current methods for migrating large amounts of encrypted data from a source database to a target database are inefficient due to the need for decryption and re-encryption, which increases processing time and resource usage, and are further hindered by network latency issues.

Innovation Solution

A system that manages the migration of encrypted data by decrypting and re-encrypting only the envelope key, rather than the data itself, using multithreaded execution to minimize processing and resource requirements, and validates data integrity through checksums.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If encrypted data is decrypted and re-encrypted during migration, then data can be transferred between databases with different encryption schemes, but processing time and resource usage increase significantly

Engineering Contradiction:

Improvecompatibility between different database encryption schemesVSAvoiddata migration time

Core Design Contradiction:

Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent extracts only the envelope key from the encrypted data structure for decryption and re-encryption, rather than processing the entire dataset. This selective extraction approach maintains compatibility between different encryption schemes while dramatically reducing processing time and resource consumption, as the envelope key is a small component compared to the full encrypted dataset

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent segments the encryption structure into the envelope key and the actual encrypted data. By applying decryption and re-encryption operations only to the envelope key segment rather than the entire data structure, the system achieves schema compatibility while minimizing processing overhead and migration time

Inventive Principle:

Principle #1Segmentation

2Adaptability or versatility

If encrypted data is decrypted and re-encrypted during migration, then data can be transferred between databases with different encryption schemes, but resource consumption increases significantly

Engineering Contradiction:

Improvecompatibility between different database encryption schemesVSAvoidprocessing resource usage

Core Design Contradiction:

Adaptability or versatilityVSUse of energy by moving object

Solution Approach 1:

The patent extracts extracts only the envelope key from the encrypted data structure for decryption and re-encryption, rather than processing the entire dataset. This selective extraction approach maintains compatibility between different encryption schemes while dramatically reducing processing time and resource consumption, as the envelope key is a small component compared to the full encrypted dataset

Inventive Principle:

Principle #2Taking out (Extraction)

3Productivity

If large amounts of encrypted data are migrated using traditional methods, then complete data transfer is achieved, but network latency issues impede the process

Engineering Contradiction:

Improvedata transfer throughputVSAvoidmigration time affected by network latency

Core Design Contradiction:

ProductivityVSLoss of time

Solution Approach 1:

The patent extracts only the envelope key for network transmission during migration, rather than transmitting the entire encrypted dataset. This dramatically reduces network traffic and minimizes the impact of network latency, while still achieving complete data transfer through the envelope key mechanism that preserves all encrypted data integrity

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS9509500B2Method and apparatus for migrating encrypted data

Publication Date: 2016.11.29 HERE GLOBAL BV

AI summary

An approach is provided for managing the migration of large amounts of encrypted data. A migration platform processes a master key associated with the source database to decrypt an envelope key associated with the data to be migrated. The migration platform also retrieves a master key associated with the target database and encrypts the envelope key based on the master key associated with the target database.