Secure Data Exchange Using Expanded Random Blocks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In secure data exchanges, especially within tightly coupled computing systems, existing encryption methods face challenges in ensuring data integrity against unauthorized access when multiple processes share memory storage, as traditional encryption systems are not practical for large-scale secure data transmission due to the need for equivalent large blocks of random numbers on both sides.
Innovation Solution
A system and method utilizing true random numbers, where a starting block of random numbers is encrypted and expanded into larger blocks for secure data exchange, allowing secure transmission between processes while maintaining data integrity by mirroring the expanded blocks on both sides of the communication network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional one-time pad encryption is used with a block of random numbers equivalent in size to the data, then security is improved, but device complexity and storage requirements worsen due to needing large blocks of random numbers on both sides
Solution Approach 1:
The patent segments the large block of random numbers into multiple smaller blocks. Instead of transmitting and storing one large random block equivalent to the data size, the system divides it into several smaller random blocks that can be managed separately, reducing the immediate storage and transmission burden while maintaining the overall security through the combined entropy of all blocks.
Solution Approach 2:
The patent introduces a temporal dimension to the random block management by implementing a random block generator that produces random blocks on-demand over time. This allows the system to avoid storing all random blocks simultaneously, as blocks can be generated sequentially and discarded after use, transforming a spatial storage problem into a temporal generation process.
2Reliability
If large blocks of random numbers are transmitted to the receiving partner, then security is improved, but loss of time worsens due to the transmission duration of equally large encrypted random blocks
Solution Approach 1:
The patent segments the large random block transmission into multiple smaller block transmissions. Instead of transmitting one large block equivalent to the data size, the system transmits several smaller random blocks separately, reducing the transmission time for each individual block while maintaining the cumulative security through the combination of all transmitted blocks.
Solution Approach 2:
The patent transforms the transmission problem by implementing on-demand generation at the receiving end. Rather than transmitting all random blocks beforehand, the system transmits a small seed or key and allows the receiving partner to generate the corresponding random blocks locally using the same algorithm, eliminating the time required to transmit large volumes of random data.
3Productivity
If multiple processes share common memory storage, then productivity is improved through efficient resource utilization, but reliability worsens due to potential unauthorized access to encrypted data
Solution Approach 1:
The patent applies local quality by assigning different security characteristics to different regions or portions of the shared memory. Sensitive encrypted data is stored in protected memory regions with restricted access, while non-sensitive data resides in accessible regions. This allows multiple processes to efficiently share common memory while maintaining security for specific data portions through differentiated access controls and encryption applied selectively to sensitive regions.
Data Source
AI summary
Systems and methods for secure communication are provided. A sender encrypts a first starting block with one of a number of random blocks. The encrypted first starting block is sent to a receiver, which expands it by a random amount. The expanded block is divided into a first expanded block and a second expanded block. A source data block is encrypted with the second expanded block and transmitted to the receiver, where it is decrypted with the decrypted first starting block. The first expanded block replaces the starting block for subsequent transmission.