Encryption Device Write Lock and Digest Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption technologies lack robust mechanisms to prevent tampering and ensure the integrity of encrypted data, particularly in scenarios where unauthorized access and data manipulation are concerns.
Innovation Solution
The proposed encryption device employs a write lock mechanism, CBC-MAC mode for generating digest information, and a key-lock system to ensure the integrity and security of encrypted data. The device sets a write lock according to user needs, uses CBC-MAC to generate and store digest information, and requires confirmation of digest information to unlock decryption processes during read operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is implemented without additional protection mechanisms, then the encryption process is simple and fast, but the ciphertext can be tampered with and its integrity cannot be ensured
Solution Approach 1:
The patent applies preliminary action by generating digest information (MAC) in advance and storing it together with the ciphertext in the memory array. This pre-computed digest serves as a reference for future integrity verification, allowing the system to detect tampering without adding complex real-time computation during decryption operations.
Solution Approach 2:
The patent introduces digest information (MAC) as an intermediary element that mediates between the ciphertext and the integrity verification process. This MAC acts as a separate authentication tag that can be compared against newly generated digest information to determine whether the ciphertext has been tampered with, thereby enhancing reliability without directly complicating the core encryption mechanism.
2Reliability
If digest information verification is required for every read operation, then data integrity is ensured, but the read operation becomes more time-consuming
Solution Approach 1:
The patent applies preliminary action by pre-generating and storing digest information alongside the ciphertext during the write operation. This eliminates the need to re-compute digest information from scratch during read operations, as the stored MAC can be directly retrieved and compared, significantly reducing verification time while maintaining security.
Solution Approach 2:
The patent uses copying by storing a copy of the digest information (MAC) in the memory array alongside the ciphertext. This copied authentication tag can be quickly retrieved and compared during read operations without requiring complex real-time computation, thereby ensuring security while minimizing time loss.
3Reliability
If write lock is set to prevent tampering, then ciphertext protection is strengthened, but write operations become more restricted
Solution Approach 1:
The patent applies dynamics by implementing a configurable write lock mechanism that can be dynamically enabled or disabled based on security requirements. The control unit can selectively activate the write lock for specific memory regions or operations, allowing flexible balancing between protection strength and operational freedom rather than applying a static, all-or-nothing approach.
Solution Approach 2:
The patent applies local quality by enabling selective application of write lock protection to different regions or types of data in the memory array. The control unit can configure which specific memory addresses or data types require write lock protection, allowing critical ciphertext to be heavily protected while permitting write operations for non-critical data, thereby maintaining operational flexibility.
Data Source
AI summary
An encryption device is provided herein, which includes a memory array and a memory control device. The memory array is configured to store lock data. The memory control device determines whether the lock data is equal to a predetermined value according to an operation instruction. When the memory control device determines that the lock data is equal to the predetermined value, the memory control device performs a logic operation on the write data and an output key to generate encrypted write data, and writes the encrypted data into the memory array as ciphertext.