Logical Data Object Encryption via Segmented Chunking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current storage technologies face challenges in securely storing business data due to vulnerabilities in data accessibility and manageability, particularly in providing encryption with minimal impact on data compression and storage efficiency.
Innovation Solution
A method and system for encrypting plaintext logical data objects by creating encrypted sections with predefined sizes, processing data chunks, and using an index section for mapping, where chunks in different sections can be encrypted with different secure keys, and using initialization vectors for encryption, facilitating efficient encryption and decryption processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data encryption is applied to storage, then data security is improved, but storage capacity and transmission efficiency deteriorate
Solution Approach 1:
The patent divides the data into chunks and encrypts them in segments rather than processing the entire data stream at once. This segmentation allows for more efficient encryption operations and better management of storage resources, resolving the contradiction between security and storage capacity.
Solution Approach 2:
The patent employs variable encryption parameters including different encryption algorithms, key sizes, and processing modes that can be adjusted based on data characteristics and storage requirements. This allows optimization of the balance between security strength and storage efficiency.
2Reliability
If data encryption is applied to storage, then data security is improved, but transmission time and processing speed deteriorate
Solution Approach 1:
The patent implements continuous encryption processing where data is encrypted in a streaming fashion as it is transmitted and stored, rather than waiting for complete data transfer. This maintains continuous security protection while minimizing transmission delays.
Solution Approach 2:
The patent performs encryption operations in advance during data ingestion and storage phases, so that when data needs to be accessed or transmitted later, it is already encrypted and ready. This preliminary action reduces the time penalty associated with encryption during critical transmission moments.
3Reliability
If encryption algorithms are made more complex to enhance security, then data security is improved, but ease of operation and system complexity deteriorate
Solution Approach 1:
The patent introduces an intermediary encryption layer that sits between the data source and storage system, handling the complexity of encryption algorithms centrally. This intermediary approach simplifies the overall system architecture by concentrating cryptographic complexity in a dedicated component rather than distributing it throughout the system.
Solution Approach 2:
The patent implements self-managing encryption where the system automatically handles key management, algorithm selection, and encryption operations without requiring manual intervention. This self-service capability reduces operational complexity while maintaining strong security through automated cryptographic processes.
Data Source
AI summary
Systems and methods for encrypting a plaintext logical data object for storage in a storage device operable with at least one storage protocol, creating, reading, writing, optimization and restoring thereof. Encrypting the plaintext logical data object comprises creating in the storage device an encrypted logical data object comprising a header and one or more allocated encrypted sections with predefined size; encrypting one or more sequentially obtained chunks of plaintext data corresponding to the plaintext logical data object thus giving rise to the encrypted data chunks; and sequentially accommodating the processed data chunks into said encrypted sections in accordance with an order said chunks received, wherein said encrypted sections serve as atomic elements of encryption/decryption operations during input/output transactions on the logical data object.