Two-Level Encryption Protocol for Secure Data Storage and Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods, such as AES and RSA, face limitations: AES is symmetric and computationally intensive, while RSA is computationally expensive and limited in data size capacity, leading to security management challenges and inefficiencies in data storage and transfer.
Innovation Solution
A two-level encryption and decryption method combining AES and RSA keys, where user and company keys are paired and encrypted using RSA private keys for secure storage and transfer, addressing the limitations of both algorithms by enhancing security and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If AES symmetric encryption is used, then encryption and decryption can be performed using the same key, but security management becomes a nightmare
Solution Approach 1:
The encryption system is segmented into two distinct levels: Level 1 uses AES symmetric encryption for fast data encryption, while Level 2 uses RSA asymmetric encryption for secure key management. This segmentation allows each algorithm to operate in its optimal domain, resolving the contradiction between speed and security management.
Solution Approach 2:
The patent introduces asymmetry by combining symmetric AES encryption at Level 1 with asymmetric RSA encryption at Level 2. The RSA key pair (public and private keys) provides the asymmetric structure needed to solve the security management problem of symmetric encryption, while AES maintains high-speed encryption capabilities.
2Reliability
If RSA asymmetric encryption is used, then security management is improved with public and private keys, but computational intensity increases and data size is limited
Solution Approach 1:
The system segments the encryption tasks by function: RSA asymmetric encryption is used only for key management and small data portions (Level 2), while AES symmetric encryption handles the bulk data encryption (Level 1). This segmentation minimizes RSA's computational overhead while maintaining its security advantages.
Solution Approach 2:
AES encryption acts as an intermediary that bridges the gap between RSA's security management advantages and its computational limitations. By using AES for the actual data encryption and RSA only for key protection, the system leverages AES's efficiency while utilizing RSA's superior key management capabilities.
3Productivity
If only AES is used for encryption, then encryption speed is maintained, but data size capacity is unlimited while security management becomes complex
Solution Approach 1:
The encryption architecture is segmented into two levels with distinct responsibilities: Level 1 (AES) handles high-speed data encryption with unlimited data capacity, while Level 2 (RSA) handles security management through public-private key pairs. This segmentation reduces the complexity of security management compared to pure symmetric encryption.
4Reliability
If only RSA is used for encryption, then security management is simplified with key pairs, but computational speed decreases and data size is limited by key size
Solution Approach 1:
The system segments encryption operations by assigning different algorithms to different levels: RSA asymmetric encryption at Level 2 provides simplified security management with key pairs, while AES symmetric encryption at Level 1 provides high-speed processing. This segmentation resolves the contradiction between security management simplicity and encryption speed.
Solution Approach 2:
AES encryption serves as an intermediary that compensates for RSA's speed limitations. By using AES for the actual data encryption process and RSA only for key management, the system achieves both the simplified security management of asymmetric encryption and the high speed of symmetric encryption.
Data Source
AI summary
The invention provides an information processing apparatus, method, and security protocol for secure storage and transfer of data using two-level encryption by combining RSA and AES keys. The apparatus includes circuitry (100) configured to receive encryption request, encrypt the data to generate first encryption data. The encryption of the data is based on an AES user key (103) and the received encryption request. The circuitry is further configured to encrypt the first encryption data to generate second encryption data, decrypt the second encryption data to generate first decryption data. The decryption of the second encryption data is based on a company AES key (107). The circuitry (100) is further configured to decrypt the first decryption data to generate the original data. The decryption of the first decryption data is based on an AES user key (103), and the second decryption data corresponds to the transmitted data.