Segmented File Encryption Using Multi-Key Attributes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods require significant computational resources to encrypt and decrypt entire files, which can be inefficient and time-consuming, especially when only specific segments of data need protection.
Innovation Solution
Implementing an encryption attribute that identifies and encrypts only specific segments of a file using multiple encryption keys, reducing the overall encryption and decryption time by not encrypting the entire file.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If entire files are encrypted using traditional methods, then data security is ensured, but computational resources and time are significantly consumed
Solution Approach 1:
The patent divides files into multiple segments and applies different encryption keys to different segments. This segmentation allows the system to encrypt only necessary portions of files rather than entire files, reducing computational overhead while maintaining security for critical data segments.
Solution Approach 2:
The patent implements selective encryption where different segments of a file receive different levels of encryption based on their sensitivity. Critical segments are encrypted with stronger methods while less sensitive segments use lighter encryption, optimizing the balance between security and performance.
2Productivity
If multiple encryption keys are used for different file segments, then encryption efficiency is improved, but system complexity increases
Solution Approach 1:
The patent introduces a file system layer as an intermediary that automatically manages multiple encryption keys. This intermediary handles key selection, distribution, and management transparently, shielding users from the complexity of managing multiple keys while enabling efficient selective encryption.
Solution Approach 2:
The system implements automatic key management where the encryption system itself handles key selection and application without requiring manual intervention. The system autonomously determines which keys to use for which segments based on file metadata and security requirements.
3Productivity
If only specific segments are encrypted, then computational burden is reduced, but security coverage may be compromised
Solution Approach 1:
The patent applies encryption selectively to only those file segments that contain sensitive data, rather than encrypting entire files. This partial action approach reduces computational burden while ensuring that security coverage is concentrated on the most critical portions of data.
Solution Approach 2:
The patent changes the encryption parameter from file-level to segment-level granularity. By controlling encryption at the segment level rather than the file level, the system can dynamically adjust security coverage based on data sensitivity, optimizing both security and performance.
Data Source
AI summary
Embodiments of methods and systems for encrypting and decrypting with encryption attributes are presented. An encryption attribute contains information to identify one or more segments of a file to be encrypted. An encryption process encrypts those one or more segments to generate a partly encrypted file instead of encrypting the entire file. That is, the file includes some data that are encrypted and some data that are not. In one embodiment, at least three encryption keys are used such that the encryption attribute is encrypted with using a third key.