Format Preserving Encryption Key Version Appending
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods do not effectively protect sensitive information like financial and location data without compromising the format, and they often require separate storage for encryption and decryption keys, which can be inefficient in terms of storage space.
Innovation Solution
Format-preserving encryption using a key version where the key is appended to the encrypted value, allowing the same key to be used for decryption and eliminating the need for separate storage of the key version, by masking and appending the key version to the encrypted value, maintaining the original format and length of the data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate storage is used for encryption keys and encrypted data, then security is improved, but storage efficiency deteriorates
Solution Approach 1:
The patent merges the encryption key and encrypted data into a single storage unit by appending the key to the encrypted data output. This combining approach maintains security through the use of masking and encryption while eliminating the need for separate key storage, thereby improving storage efficiency without sacrificing security.
2Shape
If format-preserving encryption is applied, then data format is maintained, but encryption complexity increases
Solution Approach 1:
The patent segments the data processing into distinct phases: masking the original data to preserve format, encrypting the masked data, and appending the key. This segmentation allows format-preserving encryption to be implemented systematically, managing complexity through structured processing steps while maintaining the original data format.
3Reliability
If multiple keys are used for encryption, then security is enhanced, but key management complexity increases
Solution Approach 1:
The patent combines multiple encryption keys into a single appended key structure that is stored with the encrypted data. This approach enables the use of multiple keys for enhanced security while simplifying key management, as all necessary keys are integrated into one location rather than requiring separate management of multiple independent key storage systems.
Data Source
AI summary
In one example, a system for format preserving encryption utilizing a key version can include a processor, and a memory resource storing instructions executable by the processor to determine a quantity of significant bits for a value to be encrypted, mask the value to include the quantity of significant bits, perform format preserving encryption on the masked value to generate an encrypted value, and append a key version to the encrypted value.