Secure Data Transfer via Random Block Sizing and Ordering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transfer methods are insecure as they can be easily intercepted and decrypted due to predictable block sizes and orders, especially when distributing multiple copies of the same content, allowing eavesdroppers to determine encryption keys and access the content.
Innovation Solution
A system that divides data into blocks of varying sizes, applies a circular shift, encrypts using a cryptographic processor, and transfers the blocks in random order, optionally inserting dummy blocks and using a random number to determine data transfer slots, enhancing security by making it difficult for eavesdroppers to determine the encryption keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is divided into blocks of the same size and transferred sequentially, then the data transfer process is simple and efficient, but the security is compromised as eavesdroppers can determine block patterns and encryption keys
Solution Approach 1:
The data is divided into multiple blocks of varying sizes rather than uniform blocks. This segmentation with variable sizes prevents eavesdroppers from identifying block patterns and determining encryption keys, as each block has a unique size that cannot be easily predicted or analyzed.
Solution Approach 2:
The block sizes are made dynamic and variable rather than static and uniform. By using different block sizes for different segments of data, the system introduces variability that prevents pattern recognition by attackers, while the receiver can still reconstruct the original data using the stored block size information.
2Adaptability or versatility
If multiple copies of the same content are distributed with different encryption keys, then data availability is improved, but security is weakened as eavesdroppers can use known data to recover keys
Solution Approach 1:
Each distributed copy uses asymmetric block size patterns and potentially different encryption keys. The variable block sizes create an asymmetric structure that prevents attackers from using known-plaintext attacks to recover keys, as the block size variations themselves provide additional security layers beyond just the encryption keys.
Solution Approach 2:
The system changes multiple parameters simultaneously including block sizes, transfer orders, and encryption keys for different distributed copies. This multi-parameter variation ensures that even if one copy is compromised, the unique parameter combinations in other copies remain secure.
3Ease of operation
If blocks are transferred in sequential order with predictable sizes, then data reconstruction is straightforward, but vulnerability to cryptographic attacks increases
Solution Approach 1:
The receiver stores the block size information and transfer order information before reconstruction. This preliminary storage of metadata allows the system to handle variable block sizes and random transfer orders without complicating the reconstruction process, as the receiver already has the necessary information to correctly assemble the data blocks.
Solution Approach 2:
Metadata about block sizes and transfer orders acts as an intermediary that facilitates reconstruction. This intermediary information layer separates the complexity of variable block sizes and random ordering from the actual data reconstruction process, making reconstruction straightforward while maintaining security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Encrypted information is conventionally broken into blocks which are transmitted sequentially. Because the order and the size of such blocks can be easily determined, an eavesdropper can gain valuable information regarding the content of the communication. More specifically, if known types of information exist within a block, the encryption key may be determined allowing the content of other encrypted blocks to be obtained. Embodiments of a system, method and computer program product described herein can overcome this deficiency by securely transferring information through random ordering and random block sizing. An original data set to be transferred is divided into a plurality of blocks, where at least two blocks have different sizes. Each of the blocks is encrypted. The encrypted blocks are inserted in a sequence of data transfer slots. The blocks are then selected for transfer in random order by selecting a slot to transfer based on a generated random number. Additional security is achieved by utilizing multiple channels for the transfer and transferring to multiple destinations.