Split Data Storage with Integrity Certification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data repositories face challenges in ensuring the integrity and security of stored data payloads, as increased accessibility leads to exposure of critical data, and existing systems lack effective certification for data constancy over time.
Innovation Solution
A system and method for secure data storage that includes a computer apparatus with a processor and memory, utilizing software modules to receive, secure, and store data payloads, providing certification that the data has not been altered since initial storage, with optional encryption layers and access control for editing and versioning.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data repositories enable authorized access to data payloads giving users full access to read, copy, and modify targeted data, then ease of operation is improved, but data security and integrity are worsened
Solution Approach 1:
The patent segments data payloads into multiple separate data blocks and stores them in different locations within the repository. This segmentation prevents any single user or access point from having complete control over the entire data payload, thereby maintaining data integrity while still allowing authorized access to individual blocks.
Solution Approach 2:
The patent introduces cryptographic hash functions and digital signatures as intermediary mechanisms between users and data payloads. These intermediaries verify data integrity without requiring users to have direct modification access, thus maintaining both accessibility and reliability.
2Reliability
If multiple encryption layers are applied to data payloads, then data security is improved, but device complexity is worsened
Solution Approach 1:
The patent divides the encryption process into segments corresponding to data blocks, with each block encrypted independently. This modular approach to encryption reduces overall system complexity compared to encrypting entire large data payloads as single units, while maintaining strong security through multiple layers.
Solution Approach 2:
The patent applies encryption selectively to portions of data (partial action) rather than uniformly to all data, and uses varying degrees of encryption strength based on data sensitivity (excessive action where needed). This approach optimizes the balance between security and complexity.
Data Source
AI summary
Embodiments for preventing data loss and allowing selective access data include systems and methods that receive a data payload to be stored by the system; split the data payload into a plurality of payload components; secure each of the plurality of payload components; store at least a first of the plurality of payload components at a first repository and at least a second of the plurality of payload components at a second repository; receive a request for access to the data payload; and provide certification that the data payload has not been altered since storing.