Field-Level Encryption for Flexible Data Object Reformatting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods prevent data manipulation and reformatting without decryption, limiting flexibility and usability of encrypted data objects.
Innovation Solution
A method of encryption that allows data objects to be reformatted without decryption by using encryption indicators, storing encrypted data keys in metadata, and mapping data elements across different structures while maintaining encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted at the object or file level, then security is improved, but data manipulation and reformatting capabilities are lost
Solution Approach 1:
The patent segments the data object into multiple data elements, applying encryption selectively to specific elements rather than the entire object. This allows certain data elements to remain encrypted for security while other elements remain unencrypted for manipulation and reformatting operations.
Solution Approach 2:
The patent applies different encryption states to different parts of the data object - some data elements are encrypted while others are not. This local differentiation enables security for sensitive elements while maintaining usability for non-sensitive elements.
2Reliability
If encryption keys are required for decryption and re-encryption, then security is maintained, but operational flexibility is reduced
Solution Approach 1:
The patent extracts the encryption requirement from the entire data object and applies it only to specific data elements. This extraction allows operations on unencrypted elements without requiring decryption keys, while still maintaining security for encrypted elements.
Solution Approach 2:
The patent applies encryption partially to only certain data elements rather than the entire object. This partial action enables operations on unencrypted elements without full decryption, reducing operational overhead while maintaining security where needed.
3Reliability
If encrypted data objects are transmitted to final destination, then security is improved, but intermediate manipulation by entities without keys becomes impossible
Solution Approach 1:
The patent segments the data object into encrypted and unencrypted data elements, allowing intermediate entities to manipulate unencrypted elements during transmission and processing while encrypted elements remain protected.
Solution Approach 2:
The patent applies different encryption states to different data elements, enabling intermediate processing of unencrypted elements by entities without keys while maintaining security for encrypted elements throughout the transmission chain.
Data Source
AI summary
Encryption is performed at the field level within a data object, in response to an encryption indicator. Encrypted fields are nulled or zeroed out and the encrypted values are stored in encryption metadata with a path identifying the locations of the encrypted fields. An encrypted data key is appended with a decryption identifier and stored in the encryption metadata. The encrypted data object may be reformatted while encrypted. The encrypted data key is extracted from the encryption metadata and the decryption identifier is used to identify a master key used to decrypt the encrypted data key. The data key is used to decrypt the encrypted values and the decrypted values are stored in the fields identified by the paths.