Format-Preserving Cipher for Non-Linear Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data encryption methods fail to allow for random-access or non-linear encryption and decryption of data, do not efficiently handle multi-byte values, and cannot encrypt/decrypt composite datasets with different mappings for individual components, leading to performance issues and format preservation challenges.
Innovation Solution
A format-preserving encryption and decryption method that selects specific data portions based on criteria, uses forward and reverse mappings to preserve data format, and iteratively processes data with a key-stream to ensure ciphertext values remain within specified bounds, allowing for efficient encryption and decryption of multi-byte and composite datasets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional encryption methods are used, then data is encrypted, but the format of the encrypted data changes and cannot be preserved
Solution Approach 1:
The patent applies parameter changes by transforming the encryption output through a format-preserving transformation function that maps the ciphertext to the original data format. The encryption process changes parameters (producing random bytes), then a second transformation changes the parameters again to restore the original format constraints, resolving the contradiction between security and format preservation.
2Reliability
If entire datasets are encrypted, then all data is secured, but processing time and computational resources increase
Solution Approach 1:
The patent segments the dataset into individual records or fields that can be encrypted independently. The format-preserving encryption can be applied selectively to specific columns or rows based on security requirements, allowing partial encryption of datasets rather than encrypting everything, thus improving processing speed while maintaining security where needed.
Solution Approach 2:
The patent implements partial encryption by applying format-preserving encryption only to specific portions of data that require security protection, rather than encrypting the entire dataset. This selective approach encrypts only the necessary data portions, reducing computational overhead and improving productivity while maintaining adequate security coverage.
3Manufacturing precision
If encryption preserves exact format, then data integrity is maintained, but flexibility in handling different data types is reduced
Solution Approach 1:
The patent implements a universal format-preserving encryption framework that can handle multiple data types (numeric, alphanumeric, fixed-length strings) through a single transformation function. The encryption mechanism is designed to work with any data format by defining appropriate format constraints, providing both format accuracy and data type flexibility through its multi-functional design.
Data Source
AI summary
A format-preserving cipher including encryption and decryption schemes supporting non-linear access to input data by allowing the selection of portions of data from a potentially larger dataset to be encrypted. The cipher first defines a forward mapping from the allowable ciphertext values to an integer set of the number of such allowable ciphertext values, and a corresponding reverse mapping. It also supports exclusion of a certain set of characters from the ciphering process. An encryption algorithm is provided that encrypts the input plaintext data while preserving its original format and length, and a corresponding decryption algorithm is provided. The cipher advantageously embodies the encryption and decryption of multi-byte values, composite datasets, credit card numbers and discontinuous datasets, thus fitting a variety of industrial needs.