Unified Data Structure with Mixed Cryptographic Schemes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional computer systems fail to securely and efficiently share data between applications due to reliance on transmission pipeline security and host-based protections, leading to increased storage needs for multiple data structures with varying permissions.
Innovation Solution
A data structure is generated with different cryptographic schemes for each portion of the data, allowing secure access and sharing by determining permissions and cryptographic schemes for each information set, enabling secure and organized data sharing without creating unnecessary variations of data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate downloadable files are created for each piece of information with different permissions, then data security and access control are improved, but the number of files to be stored and managed increases significantly
Solution Approach 1:
The patent combines multiple separate files with different permission sets into a single unified data structure. This data structure contains multiple data portions, each associated with different permission sets, allowing the system to maintain data security while reducing the number of files from multiple separate downloads to a single unified file.
Solution Approach 2:
The unified data structure is segmented into multiple data portions, where each portion corresponds to a specific piece of information and has its own permission set. This segmentation allows the system to apply different access controls to different portions within a single file, resolving the contradiction between security (needing separate files) and complexity (avoiding multiple files).
2Ease of operation
If traditional role-based permissions are used for data sharing, then access control is simplified, but security against unauthorized access is insufficient
Solution Approach 1:
The patent applies different cryptographic schemes to different data portions based on their specific permission requirements. Instead of using a uniform permission system, each data portion has its own cryptographic protection level and permission set, allowing the system to maintain ease of operation while significantly improving security through localized cryptographic protection.
Data Source
AI summary
In certain embodiments, first and second information to be represented in a data structure (accessible to a plurality of entities) may be obtained. First and second sets of permissions associated with the first and second information may be respectively obtained. A first cryptographic scheme may be determined for the first information based on the first set of permissions being associated with the first information. A second cryptographic scheme may be determined for the second information based on the second set of permission being associated with the second information. A first data structure portion may be generated based on the first cryptographic scheme, where the first data structure portion represents the first information in the data structure. A second data structure portion may be generated based on the second cryptographic scheme, where the second data structure portion represents the second information in the data structure.