Partial File Encryption via Segmentation Attribute
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods, such as Encrypting File System (EFS), require encrypting entire files, which is computationally intensive and inefficient, as they do not allow for selective encryption of only sensitive segments, thereby increasing the burden on the system and reducing performance.
Innovation Solution
Implementing an encryption attribute that identifies specific segments of a file to be encrypted, allowing for partial encryption, where only those segments are encrypted with a File Encryption Key (FEK) and public key, while the rest remain unencrypted, reducing overall encryption and decryption time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If entire files are encrypted using symmetric cryptography with a File Encryption Key (FEK), then security is improved, but computational time and system burden increase
Solution Approach 1:
The patent divides a file into multiple segments and applies encryption selectively to only those segments containing sensitive information, rather than encrypting the entire file. This segmentation approach reduces the total volume of encrypted data, thereby decreasing computational time and system resource consumption while maintaining security for the critical portions of the file.
Solution Approach 2:
The patent implements differential encryption quality across different parts of the file by applying encryption only to segments identified as containing sensitive information. This local quality approach ensures that security resources are concentrated where needed most, improving overall security efficiency without the overhead of full-file encryption.
2Reliability
If entire files are encrypted to protect confidential data, then security against physical access attacks is improved, but system performance and efficiency deteriorate
Solution Approach 1:
The patent segments the file and identifies only the sensitive segments that require encryption protection. By encrypting only these identified segments rather than the entire file, the system maintains security against physical access attacks while significantly reducing the computational overhead and improving overall system performance.
Solution Approach 2:
The patent applies partial encryption action by encrypting only the necessary sensitive segments of the file rather than performing excessive full-file encryption. This partial action approach achieves the minimum required security protection while optimizing system performance and reducing unnecessary computational waste.
3Productivity
If selective encryption of only sensitive segments is implemented, then encryption efficiency is improved, but device complexity increases due to segment identification and management
Solution Approach 1:
The patent introduces an intermediary component (such as a metadata structure or index mechanism) that facilitates the identification and management of sensitive segments without requiring complex analysis of the entire file. This intermediary simplifies the segment identification process, reducing device complexity while maintaining encryption efficiency.
Data Source
AI summary
Methods and systems for encrypting and decrypting are presented. In one embodiment, the method comprises encrypting one or more segments of a data with a key. The data is associated with at least one encryption attribute and having a plurality of segments. The encryption attribute includes information to identify one or more segments of the data to encrypt. The method further comprises encrypting the encryption attribute and storing the data including the partly encrypted data and the encrypted encryption attribute.