Encryption Key Erasure for Secure Data Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure data transfer methods, such as one-time pad (OTP) ciphers, face challenges in managing large encryption keys that occupy valuable memory space and require frequent key replacement, which can be vulnerable to attackers.
Innovation Solution
The proposed solution involves generating and using truly random bits for encryption and decryption keys, which are then erased after use, reducing the time these keys are stored in memory and enhancing security by limiting exposure to potential attackers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If large encryption keys are used for secure data transfer, then security is improved, but memory space is consumed and key replacement frequency increases
Solution Approach 1:
The patent implements automatic erasure of encryption keys after use by overwriting key material in memory with pseudo-random data generated from a smaller seed. This allows the system to discard large keys after they serve their encryption purpose, recovering memory space while maintaining security during active use
Solution Approach 2:
The patent extracts only the essential key material needed for encryption operations, generating additional key data on-demand from a smaller stored seed. This separates the permanent storage requirement from the operational key size, allowing secure large-key operations with minimal memory footprint
2Ease of operation
If encryption keys are stored in memory for extended periods, then ease of operation is improved, but vulnerability to attackers increases
Solution Approach 1:
The patent implements dynamic key management where encryption keys are generated, used, and automatically erased in continuous cycles. Keys exist in memory only temporarily during active encryption operations, with their lifetime dynamically adjusted by the erasure timing rather than being statically stored
Solution Approach 2:
The patent rushes through the key lifecycle by rapidly generating new key material and immediately erasing old keys after use. The system minimizes the duration keys remain in memory by quickly transitioning from key generation to key erasure, reducing the window of vulnerability to attackers
3Reliability
If frequent key replacement is implemented, then security is improved, but productivity decreases due to increased operational complexity
Solution Approach 1:
The patent implements self-service key management where the system automatically generates new encryption keys and erases old keys without external intervention. The key replacement process is autonomous, driven by internal counters and timing mechanisms that trigger automatic key regeneration and erasure, eliminating manual key management overhead
Solution Approach 2:
The patent performs preliminary key generation and preparation in advance of when keys are needed, maintaining a pipeline of ready-to-use key material. This preliminary action ensures keys are available immediately when required for encryption operations, avoiding operational delays while maintaining frequent key rotation
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Various techniques provide systems and methods for facilitating data encryption/ decryption and almost immediate erasure of associated information. In one example, a method includes receiving first data in a first memory. The method further includes receiving a first key in a second memory. The method further includes generating, by a logic circuit, second data based on the first data and the first key. The method further includes providing the second data for transmission. The method further includes erasing the first data and/or the first key in one-half clock cycle of generating the second data. Related methods and devices are also provided.