Segmented Data Encryption for Breach-Resistant Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing systems lack effective and efficient techniques for enhancing data security, particularly in edge computing environments, by relying on single encryption algorithms that can be vulnerable to breaches if compromised.
Innovation Solution
Segmenting data into chunks and applying different encryption algorithms pseudorandomly to each segment, storing metadata for location and algorithm identification, and enabling read/write operations post-encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single encryption algorithm is used to protect data, then the encryption process is simple and efficient, but the security is vulnerable to breaches if the algorithm is compromised
Solution Approach 1:
The data is divided into multiple segments or chunks before encryption. Each segment is then encrypted separately using potentially different encryption algorithms or keys. This segmentation ensures that if one segment is compromised, the entire data set remains secure, directly addressing the vulnerability of single-algorithm encryption while maintaining manageable complexity through modular processing
Solution Approach 2:
Different encryption algorithms or cryptographic parameters are applied to different segments of the data based on local requirements. This allows critical segments to use stronger encryption while less sensitive segments use simpler methods, optimizing security against the complexity trade-off by tailoring encryption strength to specific data portions
2Reliability
If multiple encryption algorithms are applied to different data segments, then security is enhanced through multi-layered defense, but the encryption and decryption processes become more complex
Solution Approach 1:
Encryption algorithms and keys are selected and configured in advance before actual data encryption occurs. This preliminary setup includes pre-generating cryptographic parameters and establishing the multi-algorithm strategy, which simplifies the actual encryption operation by removing complex decision-making during data processing while still achieving enhanced security
Solution Approach 2:
A cryptographic service provider or security module acts as an intermediary that manages multiple encryption algorithms and keys. This intermediary handles the complexity of algorithm selection, key management, and coordination automatically, shielding users from operational complexity while maintaining multi-layered security defenses
3Reliability
If data is segmented into multiple chunks with different encryption algorithms, then the risk of complete data breach is reduced, but the storage and retrieval operations require more metadata management
Solution Approach 1:
A universal metadata structure is designed that can handle multiple encryption algorithms and segmented data uniformly. This standardized metadata format manages encryption parameters, segment mappings, and retrieval information in a consistent manner across all segments, reducing the complexity that would otherwise arise from managing diverse encryption schemes for each segment individually
Data Source
AI summary
Systems and methods support segmenting and encrypting a data object. For instance, a computing system may segmented data object into multiple chunks and then encrypt each of the chunks according to pseudo-randomly selected encryption algorithms. A result is that the data object has been split into multiple encrypted chunks, where the encrypted chunks have some amount of pseudo-randomness in their encryption.