Encrypted Data Storage Segmentation and Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional data storage systems are vulnerable to unauthorized access as they often rely on single security measures like firewalls or password-based encryption, which can be bypassed or decrypted if a single key is compromised, leading to potential data theft and security breaches.
Innovation Solution
A system that encrypts each data element individually and breaks it into multiple encrypted portions, storing each portion in separate data storage devices, ensuring that even if one device is accessed by an unauthorized entity, the data remains unassembleable without access to all portions, thus providing multiple layers of security and preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional single-key encryption is used to protect data storage devices, then the encryption process is simple and fast, but the security is weak because a single compromised key allows unauthorized access to the entire device
Solution Approach 1:
The patent divides the encryption system into multiple independent segments, each handling a portion of the data with its own encryption key. Instead of encrypting the entire dataset with a single key, the system segments data into multiple parts and applies separate encryption to each segment, storing them in different locations. This segmentation ensures that compromise of one segment does not expose the entire dataset, directly resolving the security vulnerability of single-key encryption while maintaining manageable complexity through modular design.
2Reliability
If entire storage devices are encrypted with a single key, then the encryption implementation is straightforward, but unauthorized access to the single key compromises the entire device
Solution Approach 1:
The patent segments the encrypted data into multiple portions stored in different locations, each protected by its own encryption key. This segmentation transforms the single point of failure (one key protecting everything) into multiple independent protection layers, where compromising one segment does not expose the entire dataset.
Solution Approach 2:
The patent introduces decryption keys as intermediaries between the stored encrypted data and the authorized user. Instead of directly storing accessible data or using a single master key, the system uses multiple intermediate decryption keys, each required to access specific data segments. This intermediary layer prevents unauthorized access even if some keys are compromised, as the complete dataset requires all keys to be compromised simultaneously.
3Reliability
If data is stored in a single centralized location, then data retrieval is fast and simple, but the entire dataset is vulnerable to a single security breach
Solution Approach 1:
The patent segments the stored data into multiple encrypted portions distributed across different storage locations or devices. This segmentation transforms a single centralized vulnerable repository into a distributed architecture where each segment is independently secured. The complexity increase is offset by the significant security resilience gained, as attackers must compromise multiple separate locations simultaneously to access the complete dataset.
Solution Approach 2:
The patent transitions from a single-dimensional centralized storage model to a multi-dimensional distributed storage architecture. Data is not only segmented but also distributed across different spatial dimensions (multiple storage devices, locations, or servers). This dimensional transformation enhances security resilience by requiring attackers to navigate and compromise multiple independent dimensions simultaneously, while the system manages this complexity through coordinated retrieval protocols.
4Productivity
If individual data elements are encrypted separately instead of in bulk, then security is enhanced and retrieval of specific elements is faster, but the encryption and storage process becomes more complex
Solution Approach 1:
The patent segments both the data elements and the encryption process. Each data element or logical group is encrypted separately with its own key, rather than encrypting the entire dataset as a single unit. This segmentation enables selective decryption and retrieval of individual elements without processing the entire dataset, directly improving retrieval speed. The processing complexity is managed through automated key management systems that handle the multiple encryption operations efficiently.
Data Source
AI summary
According to one embodiment, a system includes one or more memory units and one or more processors. The processors are configured to receive a plurality of data elements. The processors are also configured to, for a first data element of the plurality of data elements, generate a first token for the first data element, and transmit the first token to a device. The processors are further configured to individually encrypt the first data element, and break the first encrypted data element into a plurality of encrypted data portions including a first encrypted data portion and a second encrypted data portion. The processors are further configured to transmit the first encrypted data portion of the first encrypted data element for storage in a first data storage device, and transmit the second encrypted data portion of the first encrypted data element for storage in a second data storage device.