Encrypted Logical Data Objects With Segment-Based Storage Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current storage technologies face challenges in securely storing data by balancing encryption and compression, as existing solutions either compromise on accessibility or manageability, and there is a need for a method that efficiently encrypts and compresses logical data objects while maintaining minimal impact on data accessibility and manageability.
Innovation Solution
A method and system that encrypts plaintext logical data objects by breaking them into fixed-size segments, using secure keys and initialization vectors, and mapping them into encrypted sections with an index section for efficient storage and retrieval, allowing for compression and encryption to be performed in a way that maintains data integrity and accessibility.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted for secure storage, then data security is improved, but data accessibility and manageability deteriorate
Solution Approach 1:
The patent divides encrypted data into fixed-size segments or blocks, where each segment can be independently encrypted and managed. This segmentation allows the system to process and access specific portions of data without requiring decryption of the entire dataset, thereby maintaining security while improving accessibility and manageability of individual data elements.
2Quantity of substance
If data is compressed to reduce storage capacity, then storage efficiency is improved, but data integrity and security may deteriorate
Solution Approach 1:
The patent applies compression algorithms before encryption operations. By pre-compressing the data, the system reduces the amount of data that needs to be encrypted and stored, improving storage efficiency. The compression is performed in a controlled manner that preserves data integrity, and subsequent encryption maintains the security of the compressed data without compromising its integrity.
3Reliability
If complex encryption algorithms are used to enhance security, then data security is improved, but processing time and system complexity increase
Solution Approach 1:
The patent implements encryption processing in fixed-size segments that can be processed independently and in parallel. This segmentation allows the system to apply complex encryption algorithms to small, manageable units of data, reducing the overall processing time while maintaining security. The modular approach enables efficient resource utilization and parallel processing, mitigating the time loss associated with complex encryption.
4Productivity
If data is transformed into fixed-size segments for encryption, then encryption efficiency is improved, but data structure complexity increases
Solution Approach 1:
The patent organizes data into fixed-size segments with standardized structures that facilitate efficient encryption processing. Each segment contains clearly defined fields and metadata, creating a regular pattern that simplifies the encryption process. While segmentation does introduce some structural organization, the standardized format actually reduces overall complexity by providing predictable, uniform structures that are easier to manage than variable-length data formats.
Data Source
AI summary
A method and system for encrypting a plaintext logical data object for storage in a storage device operable with at least one storage protocol, creating, reading, writing, optimization and restoring thereof. Encrypting the plaintext logical data object comprises creating in the storage device an encrypted logical data object comprising a header and one or more allocated encrypted sections with predefined size; encrypting one or more sequentially obtained chunks of plaintext data corresponding to the plaintext logical data object thus giving rise to the encrypted data chunks; and sequentially accommodating the processed data chunks into said encrypted sections in accordance with an order said chunks received, wherein said encrypted sections serve as atomic elements of encryption/decryption operations during input/output transactions on the logical data object.