Partially Encrypted File System for Energy Efficient Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computing devices face high energy consumption due to encryption and computational overhead in managed programming language environments, which reduces battery life and increases power usage, especially when managing storage functionality in low power states.
Innovation Solution
Implementing a partially encrypted file system that stores sensitive data encrypted and non-sensitive data unencrypted, and using storage hardware virtualization to provide isolated storage structures, reducing reliance on central processing units for encryption and managed runtime environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted to maintain security, then data security is improved, but energy consumption increases
Solution Approach 1:
The patent applies selective encryption where only sensitive data portions are encrypted while non-sensitive data remains unencrypted. The encryption component analyzes data sensitivity and applies encryption only to specific data segments that require protection, thereby maintaining security for critical information while reducing overall energy consumption compared to full-data encryption approaches
Solution Approach 2:
The system performs partial encryption by encrypting only the necessary portions of data rather than the entire dataset. The encryption component determines which data requires protection and applies encryption selectively, performing less encryption action than complete data encryption would require, thus reducing energy consumption while maintaining adequate security
2Adaptability or versatility
If managed programming language environments are used for application execution, then application functionality is improved, but computational overhead and energy consumption increase
Solution Approach 1:
The patent segments the execution environment by introducing a runtime component that operates independently from the managed programming language environment. This runtime component handles low-level storage and encryption operations directly, separating critical energy-consuming functions from the higher-level managed environment, thereby reducing computational overhead while preserving application functionality
Solution Approach 2:
The runtime component acts as an intermediary between the managed programming language environment and the storage/encryption subsystems. It mediates data access operations, performing encryption and storage management tasks that would otherwise burden the managed environment, thus reducing computational overhead on the application layer while maintaining full application functionality
3Reliability
If storage hardware virtualization is implemented to isolate applications, then data isolation is improved, but device complexity increases
Solution Approach 1:
The storage component provides self-service isolation by maintaining separate storage spaces for different applications without requiring complex external virtualization infrastructure. Each application's data is stored in its designated space with automatic access control, enabling data isolation through simple structural separation rather than complex virtualization mechanisms
Data Source
AI summary
One or more systems and/or techniques are provided for managing a partially encrypted file system, for storage hardware virtualization, and/or for storage management. In example, data may be stored in a partially encrypted file system, where sensitive data is encrypted for security and non-sensitive data is unencrypted, which may mitigate energy usage otherwise used for encrypting non-sensitive data, thus improving battery life. In an example, a storage device may be exposed to applications as a plurality of isolated storage structures where an application is provided data access to an isolated storage structure assigned to the application but not to isolated storage structures assigned to other applications, which may provide hardware level isolation with improved energy efficiency. In an example, a storage management component, configured to provide isolation and encryption, may be integrated into a computing device as an application specific integrated circuit (ASIC) or a system on a chip (SoC).