Encryption System Using Data Fragmentation and Permutation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional encryption methods, relying on transform or distribution techniques, are vulnerable to decryption with sufficient computing power and poorly structured algorithms, particularly in cloud storage systems, leading to data breaches and financial losses.
Innovation Solution
A combined transform and distribution encryption method that breaks objects into fragments (slices) based on a permutation defined by a very large integer key, storing each slice in multiple databases across a network, requiring the correct identifier and key for retrieval, and incorporating a faceted search engine for secure data cataloging and sharing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If transform encryption methods are used, then encryption can be applied to both temporary data and encrypted file storage, but distributed computing cannot be utilized and encryption strength is insufficient
Solution Approach 1:
The patent divides the original data into multiple slices and distributes them across different devices in a network. Each slice is encrypted separately using transform encryption, and the slices are then permuted according to a key. This segmentation allows the system to maintain the versatility of transform encryption while leveraging distributed computing resources to enhance overall encryption strength through multiple independent encryption operations.
2Ease of operation
If traditional encryption methods are used in cloud storage systems, then data can be stored and retrieved, but data breaches occur and financial losses result
Solution Approach 1:
The patent segments encrypted data into multiple slices distributed across different devices. Even if one device is compromised, the attacker only obtains a fraction of the data slices, which are useless without all other slices and the permutation key. This segmentation dramatically reduces the impact of potential data breaches while maintaining ease of storage and retrieval operations.
Solution Approach 2:
The patent introduces a permutation key as an intermediary layer between the encrypted slices and the original data. This intermediary permutation step adds an additional security barrier that must be overcome to access the data, protecting against data breaches even if encryption keys are compromised. The permutation key acts as a mediator that controls access to the distributed slices.
3Reliability
If data is distributed across multiple devices, then encryption strength increases through distributed computing, but data must be fragmented and permuted making retrieval complex
Solution Approach 1:
The patent performs preliminary actions by pre-distributing data slices to multiple devices and establishing the permutation mapping in advance. During retrieval, the system only needs to follow the pre-established permutation key to collect and reassemble slices in the correct order, rather than performing complex real-time calculations. This preliminary setup reduces retrieval complexity while maintaining strong distributed encryption.
Data Source
AI summary
A combined transformation and distribution encryption method for processing data in a series of databases across a set of devices having a defined interface, each device containing a transformed subset of original object data, and each object having a unique identifier and an encryption key, comprising the steps of transforming the object via an algorithm; fragmenting each object into a plurality of subsets; separating the transformed object subsets according to an encryption algorithm; and storing each such transformed subset in a specific device and in a selected sequence based on the encryption key.