Filtered Multi-Key Encryption for Selective Data Stream Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods fail to provide selective access to different portions of a single encrypted data stream, allowing unauthorized parties to access sensitive information when a single key is shared.
Innovation Solution
A cryptographic technique that encrypts each data portion of a stream with a specific key, generating a data map indicating the location of each portion within the stream, and applying a master cipher to create a distributable encrypted stream, allowing selective access by authorized parties.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single key is used to encrypt the entire data stream, then the encryption process is simple and efficient, but all parties with the key can access all information including unauthorized sensitive data
Solution Approach 1:
The data stream is divided into multiple data portions, each encrypted with a different key. The encryption system segments the plaintext into portions 1 through N, applies different encryption algorithms and keys to each portion, then combines them into a single encrypted data stream. This allows selective access where different parties can decrypt only their authorized portions while maintaining the simplicity of a single encrypted stream for distribution.
2Reliability
If multiple keys are used to encrypt different data portions, then selective access to authorized information is enabled, but the encryption process becomes more complex
Solution Approach 1:
Multiple encrypted data portions, each encrypted with different keys and algorithms, are merged into a single encrypted data stream. The system combines the encrypted portions 1 through N into one unified stream that can be distributed to multiple parties. Each party receives the same single encrypted stream but can only decrypt their authorized portions using their specific key, simplifying distribution while maintaining selective access control.
Solution Approach 2:
The encryption system is designed to handle multiple encryption algorithms and keys within a single unified process. The system can process different data portions with different encryption schemes (symmetric, asymmetric, hash-based) and still produce a single compatible encrypted data stream that works with a universal decryption approach, enabling multi-functionality without proportionally increasing complexity.
3Productivity
If a single encrypted data stream is distributed to multiple parties, then distribution is efficient, but unauthorized parties can access information they should not see
Solution Approach 1:
Different portions of the encrypted data stream have different decryption properties. Each data portion is encrypted with specific characteristics that allow only authorized parties to decrypt it. For example, portions containing sensitive financial information are encrypted with keys accessible only to authorized personnel, while other portions may be accessible to broader groups. This local differentiation of decryption access prevents unauthorized access while maintaining efficient single-stream distribution.
Data Source
AI summary
A method for encrypting plaintext data is enclosed that includes operations of receiving the plaintext data, the plaintext data including a plurality of data portions, encrypting each of the plurality of data portions using a specific key for each data portion, merging each of the plurality of data portions together to form a single data stream, generating a data map of the single data stream, appending the data map to the single data stream, and performing a master cipher to form an encrypted distributable stream. Operations of the encrypting include: an additive operation on each byte of the first data portion using the additive table, an XOR operation on each byte of the first data portion as modified by the additive operation, a substitution operation on each byte of the first data portion using the substitution table as modified by the XOR operation.