Hybrid Asymmetric-Symmetric Encryption for Secure Data Recording
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data encryption systems lack a third state that allows data to be written but not read, which is necessary for secure and efficient recording systems, and asymmetric encryption algorithms are computationally expensive and unsuited for bulk encryption.
Innovation Solution
A hybrid encryption scheme combining asymmetric and symmetric algorithms, where an asymmetric key pair is used to encrypt a symmetric encryption key, allowing secure recording without decryption capabilities on the remote apparatus, with the asymmetric key pair remaining valid until compromised or replaced.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric encryption is used to encrypt data on the recording device, then security is improved, but computational overhead increases and efficiency deteriorates
Solution Approach 1:
The encryption process is segmented into two distinct parts: asymmetric encryption is used only for encrypting the symmetric key (key encryption), while symmetric encryption is used for the actual data encryption. This segmentation allows each encryption type to be used in its optimal capacity, resolving the contradiction between security and efficiency.
Solution Approach 2:
A symmetric encryption key acts as an intermediary between the asymmetric encryption and the data. The asymmetric key pair encrypts this intermediary key, which then encrypts the actual data. This intermediary approach allows the system to benefit from both asymmetric encryption's security key management and symmetric encryption's computational efficiency.
2Productivity
If symmetric encryption is used for bulk data encryption, then encryption efficiency is improved, but key distribution and security management become more difficult
Solution Approach 1:
The asymmetric key pair serves as an intermediary that simplifies key management for symmetric encryption. Instead of managing multiple symmetric keys for different devices, the system uses the asymmetric public key as a universal intermediary to encrypt symmetric keys, reducing key management complexity while maintaining high encryption efficiency.
3Ease of operation
If the recording device can decrypt recorded files, then data accessibility is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The decryption capability is extracted from the recording device and placed exclusively on the host system. The recording device only performs encryption operations using the asymmetric public key and symmetric key, but cannot perform decryption. This extraction resolves the contradiction by ensuring that while data remains accessible to authorized users through the host, the recording device itself cannot compromise security through unauthorized decryption.
Data Source
AI summary
The encryption system may include a host apparatus and a remote apparatus. The host apparatus may generate an asymmetric encryption key pair that comprises a first key and a second key. The host apparatus may deliver the first key to the remote apparatus. The remote apparatus may generate a symmetric encryption key. The remote apparatus may encrypt a key block using the first key. The encrypted key block may include the symmetric encryption key and a sequence field. The remote apparatus may record a dataset. The remote apparatus may encrypt the recorded dataset using the generated symmetric encryption key. The remote apparatus may send the recording file to the host apparatus. The host apparatus may decrypt the symmetric encryption key using the second key. The host apparatus may decrypt the encrypted dataset using the symmetric encryption key.