Format-Preserving Encryption via Rotating Block Ciphers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing database encryption methods fail to preserve the format of encrypted data, leading to compatibility issues with database code and validity checks, especially when encrypting sensitive information like credit card numbers and social security numbers.
Innovation Solution
A format-preserving encryption (FPE) scheme that uses disjoint subsets and iterative encryption and permutation steps to ensure the ciphertext conforms to the same format as the plaintext, utilizing Feistel schemes and permutations to securely and efficiently store data in databases.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption methods are used, then data security is improved, but data format compatibility deteriorates
Solution Approach 1:
The patent applies parameter changes by modifying the encryption process to preserve format parameters. The Feistel cipher is configured with specific parameters (number of rounds, key schedule) that ensure the ciphertext maintains the same length, character set, and format structure as the plaintext, while still providing strong encryption. This resolves the contradiction by changing the encryption parameters to simultaneously achieve security and format compatibility.
Solution Approach 2:
The patent introduces an intermediary mapping layer between the plaintext and ciphertext. The FPE scheme uses intermediate representations (such as mapping characters to numerical values, applying encryption, then mapping back) that preserve the format while providing encryption. This intermediary process allows traditional encryption algorithms to be applied without breaking format constraints.
2Adaptability or versatility
If cycle walking is used to bridge domain gaps, then format compatibility is improved, but computational efficiency deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-configuring the Feistel cipher with the exact domain size matching the target format. Instead of using cycle walking with unpredictable iterations, the system is set up in advance with the correct number of rounds and key schedule parameters to ensure a single pass through the cipher produces the desired format. This eliminates the need for repeated applications and unpredictable iteration counts.
Solution Approach 2:
The patent makes the encryption process dynamic by adapting the Feistel cipher structure to the specific format requirements. The number of rounds, key derivation, and substitution boxes are dynamically configured based on the input format characteristics, allowing the system to efficiently handle different formats without requiring cycle walking or repeated encryption passes.
Data Source
AI summary
Methods and systems are described for format-preserving encryption. Format-preserving encryption on an entire format F may be achieved by performing format-preserving encryption on one or more subsets of F and then applying one or more permutation rounds in such a way that all elements of F enter a subset to be encrypted. A predetermined number of encryption rounds and a predetermined number of permutation rounds may be interleaved until all elements are thoroughly mixed. The resultant output data may be saved in a database in the same format as the original input data, meet all constraints of the database, and pass all validity checks applied by software supporting the database.


