Tag Aggregation Engine for Interleaved Encryption Operations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption-authentication solutions, such as AES-GCM, cannot pause and resume encryption operations on one data stream to prioritize another, due to the nature of authentication tags generated, limiting dynamic re-prioritization and efficient management of diverse data records with varying latency requirements.
Innovation Solution
Implementing a tag accumulation and correction engine to aggregate segment tags from a third-party authentication-encryption engine, reversing segment-specific errors to generate a complete authentication tag usable for the entire data record, allowing for interleaved encryption operations without altering the 'black box' logic of existing engines.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a third-party authentication-encryption engine processes data records continuously without interruption, then encryption throughput is maximized, but the system cannot dynamically re-prioritize data streams with different latency requirements
Solution Approach 1:
The patent segments the authentication tag generation process into multiple independent segments corresponding to different data record segments. Each segment can be processed independently by the encryption engine, allowing the system to pause processing of lower-priority records and resume later without affecting the integrity of authentication tags. This enables dynamic re-prioritization while maintaining encryption throughput.
Solution Approach 2:
The patent performs preliminary actions by generating and storing authentication tags for data record segments before the records are fully processed or transmitted. This allows the system to prepare encryption authentication data in advance for high-priority records, enabling rapid resumption of processing when priority changes occur, thus achieving both high throughput and adaptability.
2Adaptability or versatility
If encryption operations are paused and resumed on a data record, then higher-priority data records can be processed, but the authentication tag becomes invalid for the complete data record
Solution Approach 1:
The patent merges multiple segment-level authentication tags into a single composite authentication tag that represents the entire data record. When encryption operations are paused and resumed, the system combines the authentication tags from different segments using cryptographic operations to produce a valid authentication tag for the complete record, thus maintaining reliability while enabling interleaved operations.
Solution Approach 2:
The patent introduces an intermediary authentication tag structure that acts as a bridge between segment-level authentication and complete record authentication. This intermediary tag accumulates authentication information from multiple segments and can be finalized into a valid authentication tag for the entire record, enabling pause and resume operations without compromising authentication validity.
3Reliability
If a black box authentication-encryption engine is used, then reliability and efficiency are maintained, but the system cannot be altered or manipulated to support pause and resume operations
Solution Approach 1:
The patent adds another dimension to the authentication-encryption process by introducing a multi-layer authentication tag structure. The black box engine continues to generate authentication tags for segments as before, but the system adds a higher-layer aggregation mechanism that combines these segment tags into complete record tags. This dimensional addition enables pause and resume capability without modifying the reliable black box engine itself.
Solution Approach 2:
The patent uses an intermediary tag accumulation and correction mechanism that sits between the black box authentication-encryption engine and the final authentication verification process. This intermediary layer handles the complexity of pause and resume operations by accumulating segment tags and correcting them into valid complete record tags, allowing the black box engine to remain unchanged while gaining operational flexibility.
Data Source
AI summary
A method provides for receiving multiple different segment tags generated based on different segments of a data record, where each segment is encrypted during a separate encryption process. Upon receipt, each of the multiple different segment tags is adjusted by an end-of-segment operation that induces a segment-specific error rendering the segment tag invalid for authentication of the data record as a whole. The method provides for accumulating together the multiple different segment tags to form a combined multi-segment tag, computing a correction effective to reverse a cumulative effect of the segment-specific error for each of the multiple different segment tags on the combined multi-segment tag; and generating a complete authentication tag by adjusting the combined multi-segment tag based on the computed correction. The complete authentication tag is usable to authenticate aspects of the data record as a whole.