Format-Preserving Encryption via Rotating Block Ciphers

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing database encryption methods fail to preserve the format of encrypted data, leading to compatibility issues with database code and validity checks, especially when encrypting sensitive information like credit card numbers and social security numbers.

Innovation Solution

A format-preserving encryption (FPE) scheme that uses disjoint subsets and iterative encryption and permutation steps to ensure the ciphertext conforms to the same format as the plaintext, utilizing Feistel schemes and permutations to securely and efficiently store data in databases.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional encryption methods are used, then data security is improved, but data format compatibility deteriorates

Engineering Contradiction:
Improvedata securityVSAvoiddata format compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent applies parameter changes by modifying the encryption process to preserve format parameters. The Feistel cipher is configured with specific parameters (number of rounds, key schedule) that ensure the ciphertext maintains the same length, character set, and format structure as the plaintext, while still providing strong encryption. This resolves the contradiction by changing the encryption parameters to simultaneously achieve security and format compatibility.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent introduces an intermediary mapping layer between the plaintext and ciphertext. The FPE scheme uses intermediate representations (such as mapping characters to numerical values, applying encryption, then mapping back) that preserve the format while providing encryption. This intermediary process allows traditional encryption algorithms to be applied without breaking format constraints.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If cycle walking is used to bridge domain gaps, then format compatibility is improved, but computational efficiency deteriorates

Engineering Contradiction:
Improveformat compatibilityVSAvoidcomputational efficiency
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent applies preliminary action by pre-configuring the Feistel cipher with the exact domain size matching the target format. Instead of using cycle walking with unpredictable iterations, the system is set up in advance with the correct number of rounds and key schedule parameters to ensure a single pass through the cipher produces the desired format. This eliminates the need for repeated applications and unpredictable iteration counts.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent makes the encryption process dynamic by adapting the Feistel cipher structure to the specific format requirements. The number of rounds, key derivation, and substitution boxes are dynamically configured based on the input format characteristics, allowing the system to efficiently handle different formats without requiring cycle walking or repeated encryption passes.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS8948376B2Format-preserving encryption via rotating block encryption
Publication Date: 2015.02.03 CA TECH INC
  • US8948376B2 patent drawing
  • US8948376B2 patent drawing
  • US8948376B2 patent drawing

AI summary

Methods and systems are described for format-preserving encryption. Format-preserving encryption on an entire format F may be achieved by performing format-preserving encryption on one or more subsets of F and then applying one or more permutation rounds in such a way that all elements of F enter a subset to be encrypted. A predetermined number of encryption rounds and a predetermined number of permutation rounds may be interleaved until all elements are thoroughly mixed. The resultant output data may be saved in a database in the same format as the original input data, meet all constraints of the database, and pass all validity checks applied by software supporting the database.