Data Encryption System with Integrity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage systems lack effective at-rest data encryption solutions that ensure cryptographic integrity and prevent unauthorized access, as the frequency and sophistication of data breaches continue to rise.
Innovation Solution
A data encryption system comprising an encryption engine, a decryption engine, and a comparator, integrated with a key management device for secure key storage and verification, uses AES-256 encryption and meta-data management to ensure data integrity and security during storage and retrieval.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data encryption is implemented in storage systems, then data security and cryptographic integrity are improved, but system complexity increases
Solution Approach 1:
The patent combines the encryption engine, decryption engine, and comparator into an integrated data encryption system that operates within the storage device architecture. The encryption engine encrypts data before storage, the decryption engine decrypts data during retrieval, and the comparator verifies integrity by comparing decrypted data with expected values, all working together as a unified security mechanism
Solution Approach 2:
The comparator acts as an intermediary verification mechanism between the decryption engine and the stored data. It receives the decrypted data packet, compares it against expected values or cryptographic checksums, and validates integrity before the data is made available, thus mediating the trust between decryption and data correctness
2Reliability
If encryption integrity verification is added, then cryptographic integrity is improved, but processing time increases
Solution Approach 1:
The system performs cryptographic integrity verification during the encryption process itself rather than as a separate post-processing step. The comparator verifies integrity by comparing decrypted data with expected values before the data is written to storage or made available, performing the verification action in advance to prevent potential integrity issues from affecting later processing
Solution Approach 2:
The comparator provides feedback on the integrity status of the decrypted data by comparing it against expected cryptographic values. This feedback mechanism allows the system to detect and reject corrupted or tampered data, ensuring that only verified integrity data proceeds through subsequent processing stages
3Reliability
If key management functionality is integrated, then data protection capability is improved, but device complexity increases
Solution Approach 1:
The storage device is designed to perform multiple functions: it stores data, manages encryption keys, performs encryption, performs decryption, and verifies integrity. The key management functionality is integrated directly into the storage device architecture, allowing the same device to handle both data storage and cryptographic operations without requiring separate dedicated systems
Data Source
AI summary
A data encryption system with encryption integrity verification includes an encryption engine configured to receive an unencrypted data packet and generate an encrypted data packet based at least in part on the unencrypted data packet. The system also includes a decryption engine in electronic communication with the encryption engine, the decryption engine configured to receive the encrypted data packet and generate a decrypted data packet based at least in part on the encrypted data packet. The system further includes a comparator in electronic communication with the encryption engine and the decryption engine, the comparator configured to receive the unencrypted and decrypted data packets, determine whether the unencrypted and decrypted data packets are identical, and present the encrypted data packet as an output when the unencrypted and decrypted data packets are identical.