Storage Encryption Using Data-Derived Keys and Non-Sequential Writes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional symmetric encryption methods use the same key for both encryption and decryption, posing a security risk if the key is compromised, as data can be decrypted easily.
Innovation Solution
Implementing a method that uses a unique encryption key for a portion of the data set, optionally encrypting it further with a user-defined key and restricting access, and partitioning and writing encrypted data blocks in a non-sequential order to enhance security, including maintaining lookup or mapping tables for storage locations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric encryption is used with the same key for encryption and decryption, then the encryption process is simple and efficient, but the security is compromised because data can be easily decrypted if the key is compromised
Solution Approach 1:
The data set is divided into multiple portions, with at least one portion used as a unique encryption key for encrypting other portions. This segmentation approach creates multiple encryption layers where each portion serves a different function (key material vs. encrypted data), thereby improving security without requiring external key management systems
Solution Approach 2:
The encryption system uses the data itself to generate its encryption key by selecting a portion of the data set as the unique encryption key. This self-service mechanism eliminates the need for external key generation and management, maintaining system simplicity while enhancing security through data-derived keys
2Reliability
If data blocks are written in sequential order to storage, then the write operation is fast and efficient, but the data can be easily retrieved in raw form if storage is accessed directly
Solution Approach 1:
Instead of writing data blocks in sequential order (0, 1, 2, 3...), the system writes them in reverse sequential order or non-sequential order (3, 1, 4, 2...). This inversion of the normal write pattern prevents direct sequential access from retrieving meaningful data, enhancing security while maintaining write performance through single-pass operations
Data Source
AI summary
Described herein are systems, methods, and computer-readable media for providing enhanced encryption in a data storage system. An example method can include receiving a data set, selecting a first portion of the data set as a unique encryption key, encrypting a second portion of the data set using the unique encryption key, and writing the encrypted second portion of the data set to a storage device.