Segmented Encrypted Archive Container for Streaming Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies require the entire encrypted and compressed container to be received and processed for decryption, decompression, and authentication, which is inefficient and may compromise security, especially when dealing with large datasets or streaming content.
Innovation Solution
A signed, encrypted, and compressed container format that allows for streaming decryption, decompression, and authentication, enabling random access and parallel processing of segments without decrypting or decompressing the entire container, using a multi-level key hierarchy and collision-resistant MAC functions for secure tamper detection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the entire encrypted and compressed container is received and processed for decryption and decompression, then data integrity and authenticity can be verified, but processing time and computational resources increase significantly
Solution Approach 1:
The patent divides the encrypted container into multiple segments, each with its own authentication tag. This allows the receiver to verify and process only the needed segments rather than the entire container, reducing processing time while maintaining integrity verification for accessed data
Solution Approach 2:
Authentication tags are pre-computed and stored with each segment during the encryption process. This preliminary action enables fast verification of individual segments without requiring computation over the entire container, resolving the contradiction between verification reliability and processing time
2Reliability
If the entire container must be decrypted before accessing specific data, then security is maintained, but random access and parallel processing are prevented
Solution Approach 1:
The container is segmented into independent encrypted units, each with its own key derivation. This allows parallel decryption of multiple segments simultaneously while maintaining security through the multi-level key hierarchy, enabling both security and parallel processing
Solution Approach 2:
The patent introduces a multi-level key hierarchy that adds a dimensional structure to the encryption system. This hierarchical key structure enables independent access to different segments through different key paths, allowing parallel processing while maintaining overall security through the hierarchical structure
3Quantity of substance
If compression is applied to the entire archive, then storage space and network bandwidth are reduced, but the entire file must be received before decompression can begin
Solution Approach 1:
The compressed archive is divided into segments that can be independently decompressed. Each segment contains compression data that can be processed separately, enabling streaming access where segments are received and decompressed in any order without requiring the entire archive, while still achieving overall compression ratios
4Reliability
If authentication tags are computed over the entire encrypted container, then tamper detection is ensured, but appending new data requires recomputing all authentication tags
Solution Approach 1:
Authentication is segmented at the segment level rather than container level. Each segment has its own authentication tag computed independently, allowing new segments to be appended without recomputing tags for existing segments, maintaining tamper detection while enabling efficient data appending
Solution Approach 2:
Authentication tags are pre-computed and stored with each segment during creation. This preliminary computation eliminates the need for future recomputation when appending data, resolving the contradiction between tamper detection reliability and appending ease
Data Source
AI summary
Embodiments described herein provide a compressed container format that enables the container to be decrypted and decompressed in a streaming manner. One embodiment provides a container format for encrypted archives in which data is compressed and encrypted in a segmented manner. A segment of the archive can be decompressed, decrypted, and checked for integrity before the entire archive is received. Metadata for the encrypted archive is also encrypted to secure details of data stored within the archive.