Encrypted Data Archiving via Secure Container Compression
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems face inefficiencies in processing and storing encrypted data due to its encrypted nature, leading to operational and performance issues as they cannot perform processing on encrypted data once received, forcing a choice between inefficient storage or exposing data by decrypting it.
Innovation Solution
A secure software container decrypts encrypted data, calculates hash values, compresses the data, and re-encrypts it, allowing efficient storage and processing while maintaining data security by keeping decrypted data insulated from the storage controller.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted before being sent to shared memory for storage, then data security is improved, but the data cannot be accessed or processed once received
Solution Approach 1:
A secure software container acts as an intermediary between the encrypted data and the storage controller. The container receives encrypted data, decrypts it internally, processes it (compression, deduplication, hash calculation), and stores only processed results externally. This mediator enables both security (data never exposed outside container) and accessibility (processed data stored efficiently).
Solution Approach 2:
The system segments data processing into two distinct parts: (1) decryption and processing operations contained within the secure software container, and (2) storage operations performed by the storage controller on processed data. This segmentation allows each component to perform its function optimally while maintaining security boundaries.
2Reliability
If encrypted data is stored as received, then data security is maintained, but storage efficiency deteriorates due to inability to compress or deduplicate
Solution Approach 1:
The system performs preliminary decryption and processing actions within the secure software container before data is stored externally. By decrypting and compressing/deduplicating data within the container first, then storing only the processed results, the system achieves both security (data processed before external exposure) and storage efficiency (compressed/deduplicated data).
Solution Approach 2:
The secure software container serves as an intermediary that enables processing operations on encrypted data without exposing the decrypted content. The container receives encrypted data, performs decryption and processing internally, and outputs processed data for storage, thereby achieving both security and storage efficiency.
3Productivity
If data is not encrypted, then processing efficiency is improved, but data security deteriorates
Solution Approach 1:
The secure software container acts as a secure intermediary environment that enables processing operations on decrypted data without exposing it to unauthorized access. The storage controller can efficiently process data within the container while the container maintains security boundaries, achieving both processing efficiency and data security.
Solution Approach 2:
The system applies local quality by creating a secure processing environment within the software container where data can be processed efficiently, while maintaining security boundaries. The processing efficiency is achieved locally within the container's secure environment, while security is maintained through the container's isolation mechanisms.
Data Source
AI summary
A computer-implemented method, according to one embodiment, includes: receiving encrypted data at a storage controller, and providing the encrypted data to a secure software container. The secure software container is configured to decrypt the encrypted data, calculate hash values using the decrypted data, and compress the decrypted data. The secure software container is also configured to re-encrypt the decrypted data. The computer-implemented method also includes receiving a new copy of the encrypted data from the secure software container. The new copy of the encrypted data may be compressed, include hash values calculated at the secure software container, or compressed as well as including hash values. The new copy of the encrypted data received may thereby be stored in memory.