Polymorphic Encryption Search Using Single-Key Pseudonymous Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods for personal data, such as those required by GDPR, are inefficient and insecure, particularly in multiple-use scenarios, as they often require additional storage and multiple cryptographic keys, and are vulnerable to quantum attacks.
Innovation Solution
A method using fast symmetric polymorphic cryptography with a single key to generate multiple pseudonymous tokens from encrypted data, allowing search and analysis without decrypting the data, ensuring compliance with GDPR's 'right to be forgotten' and reducing storage and security risks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption methods are used for personal data protection, then data security is improved, but storage requirements and system complexity increase due to multiple cryptographic keys and mapping databases
Solution Approach 1:
The patent extracts and eliminates the complex key management infrastructure (multiple cryptographic keys, mapping databases, staging databases) from the system. By using a single cryptographic key that can generate multiple pseudonymous tokens, the solution removes the need for separate key storage and mapping mechanisms, thereby reducing system complexity while maintaining security
Solution Approach 2:
The single cryptographic key serves multiple functions: it can generate multiple distinct pseudonymous tokens for the same plaintext data, enabling the same key to handle multiple encryption operations without requiring separate keys for each operation. This multi-functionality eliminates the need for complex key management systems
2Reliability
If multiple cryptographic keys are used for pseudonymizing data, then data protection is improved, but maintenance costs increase due to additional meta-information storage and key safeguarding
Solution Approach 1:
The solution extracts and removes the maintenance burden associated with multiple cryptographic keys and their corresponding mapping databases. By using a single key that can generate multiple pseudonymous tokens, the system eliminates the need to safeguard multiple keys and maintain mapping metadata, significantly reducing operational maintenance costs
Solution Approach 2:
The patent discards the complex key management infrastructure and recovers the essential function of data pseudonymization through a simplified single-key system. This allows the system to maintain data protection capabilities while eliminating the maintenance overhead of managing multiple keys and mapping relationships
3Reliability
If ElGamal encryption is used for pseudonymizing data, then data security is improved, but processing performance deteriorates due to extremely high performance cost
Solution Approach 1:
The patent changes the cryptographic parameters by replacing ElGamal encryption with a different encryption scheme that uses a single key capable of generating multiple pseudonymous tokens. This parameter change maintains security requirements while significantly improving processing performance by eliminating the high computational cost associated with ElGamal operations
4Reliability
If conventional pseudonymizing mechanisms are used, then data protection is improved, but security posture weakens due to additional bread crumps exposed to potential intruders
Solution Approach 1:
The solution extracts and removes the additional security risks associated with storing and managing multiple cryptographic keys and mapping databases. By using a single key that generates multiple pseudonymous tokens without requiring separate mapping infrastructure, the system eliminates the 'bread crumps' that would otherwise be exposed to potential intruders, thereby strengthening the overall security posture
Data Source
AI summary
A method, apparatus, and computer-readable medium for searching polymorphically encrypted data includes storing one or more pseudonymous tokens in a data store, the one or more pseudonymous tokens being generated by encrypting a ciphertext using a first algorithm and an encryption key, the first algorithm comprising a polymorphic algorithm configured to generate a distinct pseudonymous token for each application of the polymorphic algorithm to the same plaintext, and identifying data in the data store that corresponds to the ciphertext by querying the data store using a search token generated by encrypting the plaintext using a second algorithm and the encryption key, the search token being distinct from the one or more pseudonymous tokens.