Selective Data Encryption Storage for Faster Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge of ensuring secure and high-speed storage of massive data is exacerbated by the time overheads of encryption and decryption, particularly in deduplicated and compressed cold data, which reduces read/write efficiency and poses security risks in key storage.
Innovation Solution
A data storage method that selectively encrypts a part of the data in a trusted execution environment (TEE) and stores it in a non-volatile memory, while the remaining part is stored in a hard disk or magnetic disk, optimizing metadata management and migration based on encryption duration and access frequency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If entire data is encrypted, then data security is improved, but encryption duration increases and read/write efficiency deteriorates
Solution Approach 1:
The patent divides data into two parts: first data (sensitive information requiring encryption) and second data (non-sensitive information stored in plaintext). This segmentation allows encryption to be applied only where necessary, reducing overall encryption duration while maintaining security for critical data elements.
Solution Approach 2:
Instead of encrypting the entire dataset, the patent applies encryption partially only to the first data portion that requires security protection. This partial action approach significantly reduces encryption time and computational overhead while still providing adequate security for the most sensitive information.
2Reliability
If entire data is encrypted, then data security is improved, but read/write efficiency deteriorates
Solution Approach 1:
The patent segments data into encrypted first data and plaintext second data, allowing read/write operations on the second data to proceed without encryption/decryption overhead, thereby maintaining high read/write efficiency while still protecting sensitive first data.
Solution Approach 2:
Encryption is applied partially only to the first data portion, allowing the majority of data (second data) to be read and written efficiently without encryption overhead, thus maintaining productivity while providing security where needed.
3Speed
If data is stored in non-volatile memory for quick access, then read speed is improved, but storage cost increases
Solution Approach 1:
The patent segments data storage into two locations: first data (encrypted, high-value sensitive information) stored in expensive non-volatile memory for quick access, and second data (plaintext, less critical information) stored in cheaper hard disk or magnetic disk storage, optimizing the balance between read speed and storage cost.
Solution Approach 2:
Different storage media with different quality characteristics are assigned to different data portions: non-volatile memory provides fast read access for critical encrypted data, while hard disk or magnetic disk provides cost-effective storage for non-critical plaintext data, creating local quality optimization throughout the storage system.
Data Source
AI summary
A data storage method includes receiving to-be-stored first data; encrypting a first data part in the to-be-stored first data; writing an encrypted first data part into a non-volatile memory; and then writing a second data part into a hard disk or a magnetic disk.