Streaming Authenticated Encryption for Large Data Files
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for authenticating large encrypted data files are resource-intensive and time-consuming due to the need to load the entire file before authentication can be performed, which affects user responsiveness and system performance.
Innovation Solution
The system processes large data files as a series of discrete, sequentially-related portions, each encrypted and authenticated independently, allowing for streaming authentication and decryption without loading the entire file, and dynamically determines portion sizes based on the receiving device's capabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the entire large encrypted data file is loaded before authentication, then data integrity can be verified, but system resource usage increases and authentication time increases
Solution Approach 1:
The patent divides the large encrypted data file into multiple discrete, sequentially-related portions. Each portion is independently encrypted and authenticated using streaming authenticated encryption, allowing the system to verify data integrity of individual portions without loading the entire file into memory. This segmentation enables efficient processing with reduced resource consumption while maintaining security and integrity verification.
2Reliability
If the entire large encrypted data file is loaded before authentication, then complete data verification is achieved, but authentication time increases
Solution Approach 1:
By segmenting the data file into portions and applying streaming authenticated encryption, the system can authenticate portions sequentially or in parallel without waiting to load the entire file. This reduces authentication time while maintaining complete verification through the use of authentication tags for each portion.
Solution Approach 2:
The patent performs preliminary encryption and authentication of data portions before they are fully loaded or processed. The authentication tags are generated and verified in advance during the streaming process, enabling faster overall authentication without compromising verification completeness.
3Productivity
If discrete portions of data are processed independently, then resource usage is reduced and processing speed improves, but system complexity increases
Solution Approach 1:
The patent employs segmentation to divide data into portions that can be processed independently, improving productivity through parallel or sequential streaming processing. The complexity is managed through standardized encryption and authentication operations applied consistently to each portion, along with mechanisms for reassembling authenticated portions into the complete decrypted file.
Data Source
AI summary
Systems are provided for the streamlining authentication of encrypted data. In streaming authentication, the authentication and decryption of a data file is performed in a streaming manner. The data file can be stored as a collection of discrete encrypted portions. When the data file is to be accessed, it can be authenticated in a streaming manner, as discrete portions of the large file are loaded from storage or transmitted to other systems.