Incremental Authenticated Encryption for Data Streaming
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authenticated encryption methods are inefficient for data streaming and partial retrieval, requiring excessive processing to authenticate and decrypt entire data objects, making them impractical for large and complex computing resource configurations.
Innovation Solution
Incremental authenticated encryption techniques position authentication tags within ciphertext, allowing for the authentication and decryption of data between tags without decrypting the entire ciphertext, using secured incremental message authentication codes and a consistent hash function with different initial counter blocks to ensure cipher strength.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional authenticated encryption is used to protect data integrity and authenticity, then security is improved, but processing capacity and bandwidth usage increase excessively
Solution Approach 1:
The patent divides the ciphertext into multiple segments, each containing a portion of the encrypted data and an authentication tag. This segmentation allows the system to process and authenticate only the required portion of data rather than the entire ciphertext, reducing processing capacity requirements while maintaining security through incremental authentication of individual segments.
2Reliability
If conventional authenticated encryption is used to ensure data integrity, then authenticity is improved, but latency increases due to excessive processing
Solution Approach 1:
By segmenting the ciphertext with authentication tags positioned at specific intervals, the patent enables parallel processing of multiple segments and allows authentication to begin as soon as the required segments are received, rather than waiting for the entire ciphertext. This reduces authentication latency while maintaining data authenticity through incremental verification.
3Reliability
If conventional authenticated encryption is used to protect data confidentiality, then security is improved, but bandwidth usage increases due to processing entire data objects
Solution Approach 1:
The patent structures the ciphertext as segmented portions with authentication tags, enabling the system to transmit and process only the specific segments that contain the required data rather than the entire encrypted data object. This reduces bandwidth usage by eliminating the need to transfer and process unnecessary ciphertext segments while maintaining confidentiality through selective decryption of authenticated segments.
Data Source
AI summary
Data is encoded to be incrementally authenticable. A plaintext is used to generate a ciphertext that comprises a plurality of authentication tags. Proper subsets of the authentication tags are usable to authenticate respective portions of plaintexts obtained from the ciphertext. Portions of the plaintext can be obtained and authenticated without decrypting the complete ciphertext.