Partial Encryption for Limited Processing Power

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Host devices with limited processing power, such as mobile devices running Java platforms, are unable to decrypt and render encrypted content, particularly video files, due to the high processing requirements.

Innovation Solution

A storage device partially encrypts content files, sending only encrypted portions to the host device while keeping other portions in clear text, allowing the host device to decrypt only the necessary parts, even if it lacks the processing power for full decryption, and optionally using additional encryption keys for DRM-protected content.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the storage device sends the content in an encrypted form to the host device, then copy protection is improved, but the host device cannot decrypt and render the content due to insufficient processing power

Engineering Contradiction:
Improvecopy protectionVSAvoidcontent accessibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The content file is divided into multiple portions, with only a subset encrypted and transmitted to the host device. The host device decrypts only the encrypted portions using its limited processing power, while the unencrypted portions are processed directly. This segmentation allows devices with limited computational capability to access content that would otherwise be inaccessible.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Instead of encrypting the entire content file (excessive action), the system encrypts only the necessary portions (partial action). This partial encryption approach provides sufficient copy protection for the encrypted portions while avoiding the processing burden of decrypting the entire file, thereby enabling accessibility on devices with limited processing power.

Inventive Principle:
Principle #16Partial or excessive action

2Reliability

If the storage device encrypts the entire content file, then security is improved, but the host device requires excessive processing power to decrypt and render the content

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing power requirement
Core Design Contradiction:
ReliabilityVSPower

Solution Approach 1:

The content is segmented into encrypted and unencrypted portions. The storage device transmits only the encrypted portions to the host device, which then processes only those portions through decryption. This segmentation significantly reduces the processing power requirement compared to decrypting the entire file, while maintaining security for the encrypted portions.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system applies partial encryption to only the necessary portions of the content file rather than encrypting the entire file. This partial action reduces the computational burden on the host device while maintaining adequate security for the encrypted portions, enabling playback on devices with limited processing power.

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If the storage device transmits fully encrypted content, then copy protection is strengthened, but accessibility to mobile devices with limited processing power is reduced

Engineering Contradiction:
Improvecopy protectionVSAvoiddevice compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The content file is segmented into encrypted and unencrypted portions, allowing the system to adapt to different device capabilities. Mobile devices with limited processing power can successfully decrypt and render the unencrypted portions, while the encrypted portions provide copy protection. This segmentation enhances device compatibility across various mobile platforms.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system uses partial encryption on selected portions of the content file, which provides sufficient copy protection for those portions while leaving other portions accessible to devices with limited processing power. This partial action approach increases adaptability and versatility across different mobile device platforms.

Inventive Principle:
Principle #16Partial or excessive action

4Reliability

If the storage device uses additional encryption keys for DRM content, then DRM protection is improved, but the complexity of content delivery and playback is increased

Engineering Contradiction:
ImproveDRM protectionVSAvoidcontent delivery complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The content file is segmented into portions encrypted with different keys, including DRM keys and alternative keys. The storage device transmits the content with embedded key information, allowing the host device to select and process the appropriate portions based on the available keys. This segmentation with multiple keys maintains DRM protection while simplifying the playback process through automated key selection.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The content delivery system is designed with multi-functionality to handle multiple encryption schemes and key types within a single framework. The storage device and host device can process content encrypted with different keys (DRM keys, alternative keys) using the same partial encryption mechanism, reducing the overall complexity compared to separate handling of different encryption types.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS8972723B2Storage device and method for providing a partially-encrypted content file to a host device
Publication Date: 2015.03.03 SANDISK TECHNOLOGIES LLC
  • US8972723B2 patent drawing
  • US8972723B2 patent drawing
  • US8972723B2 patent drawing

AI summary

A storage device and method for providing a partially-encrypted content file to a host device are provided. In one embodiment, the storage device retrieves a content file from memory in the storage device and partially-encrypts the content file by encrypting some portions of the content file. The storage device sends the partially-encrypted content file to a host device and informs the host device of which portions of the partially-encrypted content file are encrypted. In one embodiment, the remaining portions of the content file are in clear text form and do not need to be decrypted. Because the host device only needs to decrypt the portions of the content file that are encrypted—and not the entire content file—the host device can decrypt the partially-encrypted content file, even if it does not have the processing power to decrypt a fully-encrypted version. In another embodiment, at least some of the remaining portions of the content file are encrypted with at least one additional key.