Read-Only Field Protection via Interceptor Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In client-server computer systems, data integrity is compromised due to potential tampering by malicious actors during data transmission, as read-only values can be modified without the end user's knowledge, leading to improper data storage and resource wastage.
Innovation Solution
Implementing bi-directional encryption methods using interceptors to compare encrypted read-only data before and after transmission, ensuring that any mismatch triggers an error notification and preventing unauthorized modifications, thereby maintaining data integrity and conserving computational resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If read-only values are transmitted in plaintext between client and server, then data transmission efficiency is improved, but data integrity is compromised due to potential tampering by malicious actors
Solution Approach 1:
The patent creates encrypted copies of read-only data values and transmits these copies instead of the original plaintext values. The encryption mechanism generates encrypted representations that maintain the essential information while protecting against tampering, allowing the system to verify data integrity through comparison of encrypted values before and after transmission.
Solution Approach 2:
The patent combines multiple data elements (read-only values, encrypted representations, and verification mechanisms) into a composite data structure that is transmitted between client and server. This composite approach allows simultaneous achievement of transmission efficiency and integrity verification by bundling the encrypted data with its verification counterpart.
2Reliability
If encrypted read-only data is compared to verify integrity, then data security is improved, but computational resources are consumed by encryption and comparison operations
Solution Approach 1:
The patent extracts only the essential read-only data values that require protection and applies encryption selectively to these specific elements rather than encrypting entire data sets. This extraction approach minimizes the computational overhead of encryption and comparison operations while maintaining security for the critical data elements.
Solution Approach 2:
The encryption mechanism serves multiple functions simultaneously: it protects data confidentiality, enables integrity verification through comparison, and provides a tamper-detection mechanism. This multi-functionality reduces the need for separate verification systems, thereby optimizing computational resource usage.
3Reliability
If individual fields are verified for integrity, then data protection is improved, but system complexity increases due to multiple verification operations
Solution Approach 1:
The patent merges multiple verification operations into a single unified process by comparing encrypted read-only values at the application layer. Instead of implementing separate verification mechanisms for each data field, the system combines all read-only value verifications into one encryption-comparison operation, significantly reducing system complexity.
Solution Approach 2:
The patent introduces an intermediary encryption mechanism that acts as a mediator between data transmission and verification. This intermediary layer handles the complexity of integrity verification by providing encrypted representations that can be directly compared, simplifying the overall verification process and reducing system complexity.
4Productivity
If tampered data is allowed to proceed without verification, then processing speed is improved, but improper data storage occurs leading to resource wastage
Solution Approach 1:
The patent performs integrity verification through encrypted value comparison before data is processed or stored. By conducting this verification in advance, the system prevents tampered data from entering the processing pipeline, ensuring that only valid data consumes computational resources for processing and storage operations.
Solution Approach 2:
The patent applies preliminary anti-action by using encryption to pre-protect data against tampering before transmission occurs. This preemptive measure creates a barrier that detects tampering attempts before they can result in improper data storage, thereby preventing the resource wastage that would result from processing corrupted data.
Data Source
AI summary
To dynamically protect read-only fields using interceptors and encryption, application data is received from an application executing on a client computer system connected to a server computer system connected to a computer-readable database. The application data includes multiple read-only values assigned to corresponding multiple read-only data items and stored on the computer-readable database, which stores generated encrypted read-only data collectively representing an encryption of the multiple read-only values by an encryption mechanism. The received multiple read-only values are encrypted using the same encryption mechanism resulting in received encrypted read-only data. The received encrypted read-only data is compared with the generated encrypted read-only data. Based on the comparing, it is determined that the received encrypted read-only data differs from the generated encrypted read-only data. In response, an error notification is transmitted communicating a mismatch between the stored multiple read-only data values and the received multiple read-only data values.