Sequential MAC Computation for Data Integrity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data security systems are inefficient when computing resources are limited, as they struggle to protect data from modification, deletion, or substitution without sufficient processor time, RAM, or storage space.
Innovation Solution
A system and method that uses a computing platform with a processor and memory to implement an encryption key building tool, a message authentication code (MAC) computing tool, and a check determination tool to detect compromised data by generating and comparing MACs for messages in a data log, ensuring data integrity even with limited resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional data security systems (encryption, MAC computation) are implemented, then data integrity and security are improved, but computational overhead and resource consumption increase significantly
Solution Approach 1:
The patent extracts only the essential security verification function from traditional complex cryptographic systems. Instead of implementing full encryption-decryption cycles or complex MAC verification protocols, the system extracts and implements only the core hash computation and comparison functionality, removing unnecessary computational overhead while preserving data integrity verification capability.
Solution Approach 2:
The patent employs lightweight, computationally inexpensive hash functions that can be executed rapidly and discarded. Each data block receives a simple hash computation that requires minimal processing resources, making the security verification mechanism affordable for resource-constrained environments like IoT devices, rather than relying on expensive cryptographic operations.
2Reliability
If comprehensive data security protocols are applied to all data blocks, then security coverage is improved, but processing speed and productivity deteriorate
Solution Approach 1:
The patent segments the data stream into discrete blocks and applies security verification independently to each segment. This segmentation allows parallel processing of multiple data blocks simultaneously, improving overall processing throughput while maintaining comprehensive security coverage across all data segments without the bottleneck of sequential verification.
Solution Approach 2:
The patent implements a streamlined security verification that performs only the essential hash computation and comparison operations, applying partial action rather than full cryptographic protocols. This selective application of security measures maintains adequate protection while avoiding the performance penalty of exhaustive security checks on every data block.
3Reliability
If complex cryptographic operations are performed, then security strength is improved, but device complexity and implementation difficulty increase
Solution Approach 1:
The patent replaces complex mechanical cryptographic systems (multiple encryption layers, key management infrastructure, certificate validation chains) with a simplified computational approach using hash functions. This substitution eliminates the need for complex key exchange protocols, certificate authorities, and multi-layer encryption/decryption mechanisms, reducing implementation complexity while maintaining security through cryptographic hashing.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems and methods for ensuring data security. A MAC is computed sequentially for each selected message from a data log that contains at least two messages. To build a data block, a preset encryption key is used for a first message and an encryption key for the previous message is used for subsequent messages. A determination that the data log is compromised can be made based on MAC data block data and an independent calculation of a MAC.