Data Processing System with Synthetic Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The re-encryption technique based on public key encryption requires a large processing load, making it difficult to apply to devices with poor computational resources, such as those in the IoT field, and does not adequately address data integrity verification for users receiving transferred data.
Innovation Solution
A data processing system where user terminals generate temporary keys and synthetic keys using unique keys, allowing data to be transmitted and verified without imposing a heavy processing load, with a data storage server using a replacement key to facilitate secure data transfer and integrity verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key encryption re-encryption technique is used to ensure data integrity and prevent information leakage, then security is improved, but processing load increases significantly
Solution Approach 1:
The patent segments the encryption system into multiple components: unique keys for individual users, temporary keys for specific operations, synthetic keys for data protection, and replacement keys for key management. This segmentation allows each component to have a specific function, reducing the overall processing load while maintaining security.
Solution Approach 2:
The patent introduces synthetic keys as intermediaries between unique keys and encrypted data. The synthetic key serves as a mediator that can be generated and managed separately from the sensitive unique key, reducing the processing burden on users while maintaining security through the layered key structure.
2Productivity
If common key encryption technology is used to reduce processing load, then processing efficiency is improved, but key sharing security vulnerabilities increase
Solution Approach 1:
The patent segments the key management system by providing each user with a unique key instead of sharing a common key. This segmentation eliminates security vulnerabilities associated with key sharing while maintaining processing efficiency through the use of symmetric encryption algorithms with individualized keys.
Solution Approach 2:
The patent applies local quality by allowing each user to have their own unique key properties rather than using a uniform common key for all users. This enables customized security levels for different users while maintaining overall system efficiency.
3Ease of manufacture
If cloud service outsourcing is used to reduce operation costs, then cost is reduced, but information leakage risk to third parties increases
Solution Approach 1:
The patent introduces synthetic keys as intermediaries between the user's unique key and the data stored in the cloud. This allows the cloud service provider to access and manage encrypted data without having access to the user's unique key, preventing information leakage while enabling cloud outsourcing.
Solution Approach 2:
The patent implements preliminary action by encrypting data with the user's unique key before uploading to the cloud, and generating synthetic keys in advance for authorized access. This ensures that even if the cloud provider is compromised, the sensitive unique key remains protected and cannot be extracted.
Data Source
AI summary
Provided is a data processing system in which data are uploaded from a user terminal A to data storage server, and data are accessed from a user terminal B. User terminal A and B have a key KA and KB, respectively. Data storage server has a replacement key KA→B. User terminal A generates an authenticator tag with data M and temporary key R, generated by user terminal A, and generates a key k with temporary key R and key KA. User terminal A transmits data M, key k, and authenticator tag to the data storage server. Data storage server generates a key k′ from key k and replacement key KA→B, and transmits data M, key k′, and the message authenticator tag to user terminal B. User terminal B generates temporary key R with key k′ and key KB and generates an authenticator tag′ to compare with the received authenticator tag.