Selective Data Encryption in Shared Memory Containers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack the ability to securely and efficiently manage the encryption of partial data elements within files, particularly in collaborative environments, as they often require encrypting entire documents or devices, which is inefficient and prone to errors, and do not allow for secure copying of revealed data through insecure memory spaces.
Innovation Solution
The system enables selective encryption and decryption of data elements at various levels, from individual characters to entire files, using a client-server model with cryptographic techniques like AES-256, allowing for secure sharing and compatibility with multiple file formats while maintaining document integrity and scalability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If whole file encryption is used to protect sensitive data, then security is improved, but storage efficiency and collaboration capability deteriorate
Solution Approach 1:
The patent segments the file into multiple data containers, each containing specific data elements that can be independently encrypted or decrypted. This allows selective encryption of only the sensitive portions of the file rather than the entire file, enabling collaboration on non-sensitive sections while maintaining security for protected sections.
Solution Approach 2:
The patent applies different encryption states to different parts of the file - some data containers are encrypted while others are decrypted. This local differentiation allows users to access and collaborate on unencrypted portions while sensitive portions remain protected, resolving the contradiction between security and collaboration efficiency.
2Reliability
If multiple manually redacted files are created for different security clearance levels, then access control is improved, but device complexity and error risk increase
Solution Approach 1:
The patent divides the file into multiple data containers that can be independently controlled. Each container can be encrypted or decrypted based on user clearance levels, eliminating the need to create separate redacted files for different users. The system automatically manages which containers are accessible to which users based on their security clearances.
Solution Approach 2:
The patent creates cryptographic copies of data elements in encrypted form within the same file structure, allowing the same physical file to serve multiple security levels. Instead of creating multiple physical copies with different redactions, the system uses cryptographic copying to provide different views of the same data based on user permissions.
3Quantity of substance
If partial file encryption is implemented to improve storage efficiency, then storage needs are reduced, but system complexity increases
Solution Approach 1:
The patent segments the file into data containers that can be independently encrypted. Only the necessary sensitive portions are encrypted, reducing storage requirements compared to whole-file encryption. The system automatically manages the encryption state of each container, reducing the perceived complexity for users while enabling efficient storage utilization.
Data Source
AI summary
Systems and methods for encrypting an unencrypted data set within a file are provided. The disclosed systems and methods can be configured to create a ciphertext object within the existing data structures of a native file format. The systems and methods enable the secure copying data between multiple applications while displaying a revealed form of the data to a user.