Layered Encryption for Long-Lived Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge lies in securely storing data for varying durations in network computing and network data storage systems, where existing encryption methods may become insecure over long periods due to advancements in computing resources, making it difficult to maintain long-term cryptographic security.
Innovation Solution
The use of layered encryption techniques combined with one-time pads and periodic re-encryption with state-of-the-art cryptography, where a base data pad is used multiple times to generate derived pads, and the seeds or keys are stored and periodically updated to increase the complexity of decryption, ensuring security by distributing the necessary elements across different locations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing encryption methods are used for long-term data storage, then data can be stored and retrieved, but the encryption becomes insecure over time due to advancements in computing resources
Solution Approach 1:
The encryption system is made dynamic through periodic re-encryption with state-of-the-art cryptography. The base data pad is periodically updated and used to generate new derived pads, ensuring that the encryption method evolves over time to counteract advancements in computing resources and maintain long-term security.
Solution Approach 2:
The patent implements periodic re-encryption operations where the base data pad is updated at regular intervals and used to generate new derived pads for re-encrypting the data. This periodic action ensures that even if the data is stored for extended periods, the encryption remains secure by incorporating the latest cryptographic standards at each re-encryption cycle.
2Reliability
If layered encryption with multiple data pads is used, then security is significantly increased, but the complexity of the encryption system increases
Solution Approach 1:
The encryption system is segmented into multiple independent layers, each using a separate derived data pad. The base data pad is divided and transformed into multiple derived pads through cryptographic functions, allowing the data to be encrypted in multiple passes. This segmentation increases security because an attacker would need to compromise multiple independent layers rather than a single encryption mechanism.
Solution Approach 2:
The patent implements nested encryption where multiple derived data pads are applied in successive layers around the same data. Each derived pad creates an additional encryption layer that contains the previous layer, similar to nested dolls. This nested structure significantly increases the complexity of decryption while maintaining a relatively simple encryption process.
3Productivity
If the base data pad is used multiple times to generate derived pads, then resource efficiency is improved, but the security risk increases if the base pad is compromised
Solution Approach 1:
The patent applies local quality by ensuring that each derived data pad has unique cryptographic properties specific to its position and purpose in the encryption hierarchy. Even though all derived pads originate from the same base pad, cryptographic transformations ensure that compromise of one derived pad does not automatically compromise others, localizing the security impact rather than creating a single point of failure.
Data Source
AI summary
Techniques for encrypting long-term data using layered encryption based on difficult to obtain secrets are described herein. The set of data to encrypt is designated as the source data for the first iteration. Then, for each iteration, a derived set of data is generated from a set of random data and the source data is combined with the derived set of data to produce a set of encrypted data. The set of encrypted data is then designated as the source data for the next iteration.