Selective Data Encryption in Blockchain Storage Layers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage layers, such as blockchains, face challenges in securely sharing transaction data while ensuring that sensitive private information is not accessible to all nodes, necessitating improved cryptographic solutions for verifiability and security.
Innovation Solution
A data storage controller that employs selective encryption techniques using symmetric and asymmetric keys to separate data into public and private blocks, encrypting the private data and protecting it with communication partner-specific keys, allowing only authorized nodes to access the encrypted data while maintaining public data accessibility.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all transaction data is made publicly accessible in a blockchain data storage layer, then verifiability and sharing are improved, but security of sensitive private information deteriorates
Solution Approach 1:
The patent divides transaction data into two distinct segments: public data blocks that are visible to all nodes for verification, and private data blocks that are encrypted and accessible only to authorized parties. This segmentation allows the system to simultaneously achieve verifiability through public data while protecting sensitive information through encryption of private data.
Solution Approach 2:
Different portions of the data storage layer are assigned different security properties. Public data blocks are stored with full accessibility for all nodes, while private data blocks are stored with restricted access controlled by encryption keys. This local differentiation of data quality and access permissions enables simultaneous achievement of transparency and security.
2Object-affected harmful factors
If selective encryption is applied to specific portions of data, then security of sensitive information is improved, but device complexity increases
Solution Approach 1:
Instead of encrypting all data, the patent applies encryption selectively only to private data blocks that require protection. Public data blocks remain unencrypted for efficient verification. This partial action approach provides necessary security while avoiding the excessive complexity of encrypting the entire dataset.
Solution Approach 2:
The patent extracts and separates the sensitive private information from the public transaction data, applying encryption only to the extracted private portions. This extraction allows the system to focus cryptographic resources only where necessary, reducing overall system complexity compared to comprehensive encryption.
3Object-affected harmful factors
If encrypted data is stored in the data storage layer, then data protection is improved, but accessibility and sharing of data deteriorates
Solution Approach 1:
The patent segments data into public and private blocks with different access permissions. Public data blocks maintain full accessibility for all nodes to perform verification and sharing operations. Private data blocks are encrypted but structured to allow authorized nodes to access them when needed, thus maintaining ease of operation for both protected and unprotected data.
Solution Approach 2:
The patent introduces encryption keys as intermediaries that mediate access to encrypted data. Authorized nodes possess the necessary keys to decrypt and access private data blocks when required, while unauthorized nodes cannot access the data. This intermediary mechanism preserves data protection while enabling controlled accessibility.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A data storage layer provides enhanced data security. In one implementation, the data storage layer allows selective encryption of specific parts of data blocks, with decryption restricted to pre-determined entities. The selective encryption may be applied to parts of data blocks that are stored in blockchains, for instance, to provide fine grained control over which entities with access to the blockchain can decrypt and use the parts of the data blocks with the enhanced security.