Format-Preserving Encryption Engine for Database Compatibility
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional encryption algorithms, such as AES and DES, are inefficient and cumbersome as they require encrypting entire files, making it difficult to selectively access or decrypt specific portions of data, and they alter the format of data strings, causing compatibility issues with database systems.
Innovation Solution
Format-preserving encryption and decryption engines that process data strings to remove extraneous characters, encode them using an index, and encrypt using a format-preserving block cipher, ensuring the encrypted data maintains the original format by post-processing to restore removed elements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional encryption algorithms (AES/DES) are used to encrypt entire files, then data security is improved, but data access efficiency deteriorates because the entire file must be decrypted to access any portion
Solution Approach 1:
The patent divides the encrypted data into multiple segments or blocks, each independently encryptable and decryptable. This allows selective decryption of only the necessary portions rather than the entire file, improving access efficiency while maintaining security through cryptographic protection of each segment.
Solution Approach 2:
The patent implements partial decryption capability where only the specific portions of encrypted data that are needed are decrypted, rather than decrypting the entire file. This partial action approach maintains security by keeping unnecessary portions encrypted while providing efficient access to required data.
2Reliability
If conventional encryption algorithms are used, then data security is improved, but format compatibility deteriorates because the encrypted data format differs from the original format
Solution Approach 1:
The patent employs format-preserving encryption that changes the cryptographic parameters while maintaining the original data format characteristics. This allows encrypted data to retain the same structure, length, and character type properties as the plaintext, ensuring compatibility with legacy systems and databases that expect specific formats.
Solution Approach 2:
The encryption system is designed to be universal and compatible with multiple data formats and legacy systems. The format-preserving capability allows the same encryption mechanism to work across different applications and systems without requiring format conversion, enhancing versatility and adaptability.
3Reliability
If entire files are encrypted, then data security is improved, but system complexity increases because selective access and different permission levels become difficult to implement
Solution Approach 1:
By segmenting encrypted data into independent blocks with individual encryption keys or access controls, the system simplifies permission management. Each segment can have its own access policies, making it easier to implement different permission levels for different users or applications without complex system architecture.
Solution Approach 2:
The patent implements preliminary organization of encrypted data into structured segments with associated metadata about access permissions. This preliminary structuring simplifies subsequent access control operations, as the system can quickly identify and grant access to authorized users without complex real-time decision-making processes.
Data Source
AI summary
A data processing system is provided that includes format-preserving encryption and decryption engines. A string that contains characters has a specified format. The format defines a legal set of character values for each character position in the string. During encryption operations with the encryption engine, a string is processed to remove extraneous characters and to encode the string using an index. The processed string is encrypted using a format-preserving block cipher. The output of the block cipher is post-processed to produce an encrypted string having the same specified format as the original unencrypted string. During decryption operations, the decryption engine uses the format-preserving block cipher in reverse to transform the encrypted string into a decrypted string having the same format.