Selective Encryption Delineation Using Sentinel Markers

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing electronic computing and communication systems face challenges in efficiently delineating and decrypting selectively encrypted data streams, particularly in mixed data communications, which require balancing security and latency.

Innovation Solution

The implementation of selective encryption delineation methods, including the use of edge encryption proxies that identify and manage encrypted portions within data streams by inserting and recognizing sentinels, allowing for efficient decryption and decryption of sensitive information without significant latency or resource overhead.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If selective encryption is applied to sensitive portions of data streams, then security is improved, but system complexity and processing overhead increase

Engineering Contradiction:

ImprovesecurityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The data stream is segmented into encrypted and unencrypted portions using sentinel markers. The encryption system divides the continuous data flow into discrete segments that can be independently processed, allowing selective encryption of sensitive portions while maintaining system manageability and reducing overall complexity.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

An edge encryption proxy acts as an intermediary component between the data source and the communication channel. This proxy handles the complex encryption/decryption operations, isolating the complexity from the main system while providing security services to the application layer.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If full decryption of data streams is performed, then data accessibility is improved, but processing time and resource consumption increase

Engineering Contradiction:

Improvedata accessibilityVSAvoidprocessing time

Core Design Contradiction:

Ease of operationVSLoss of time

Solution Approach 1:

Instead of decrypting the entire data stream, the system performs partial decryption only on the encrypted portions identified by sentinels. The unencrypted portions are passed through without decryption, reducing processing time and resource consumption while still providing access to all necessary data.

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

Sentinel markers are inserted into the data stream in advance to pre-identify encrypted portions. This preliminary action allows the decryption process to immediately locate and process only the necessary encrypted segments without scanning or analyzing the entire data stream, significantly reducing processing time.

Inventive Principle:

Principle #10Preliminary action

3Measurement precision

If encryption sentinels are inserted into data streams, then encrypted portion identification is improved, but data stream structure complexity increases

Engineering Contradiction:

Improveencrypted portion identificationVSAvoiddata stream structure

Core Design Contradiction:

Measurement precisionVSDevice complexity

Solution Approach 1:

The sentinel markers introduce localized structural changes only at the boundaries of encrypted portions, rather than transforming the entire data stream structure. The majority of the data stream maintains its original structure, while only specific local regions are marked with sentinels for identification.

Inventive Principle:

Principle #3Local quality

4Reliability

If selective encryption processing is implemented, then security performance is improved, but resource utilization increases

Engineering Contradiction:

Improvesecurity performanceVSAvoidresource utilization

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The encryption processing is applied partially only to the encrypted portions of the data stream identified by sentinels, rather than processing the entire data stream. This reduces CPU cycles, memory usage, and energy consumption while maintaining security performance for the sensitive portions.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS11575524B2Selective encryption delineation

Publication Date: 2023.02.07 SERVICENOW INC

AI summary

Decoding a partially encrypted data stream may include receiving and scanning the partially encrypted data stream. Scanning the partially encrypted data stream may include identifying an encrypted portion sentinel in the partially encrypted data stream subsequent to a first portion, identifying an encrypted portion in the partially encrypted data stream subsequent to the encrypted portion sentinel, and generating a decrypted data portion by decrypting the encrypted portion. Decrypting the encrypted portion may include identifying an encrypted data portion in the encrypted portion, the encrypted data portion omitting an end encrypted portion sentinel, decrypting the encrypted data portion, and identifying an end encrypted portion sentinel in the encrypted portion subsequent to the encrypted data portion. Decoding the partially encrypted data stream may include including the decrypted data portion in the decrypted output data stream, and outputting the decrypted output data stream to a client device in the second network domain.