Unified Encryption Engine for Continuous Data Stream Processing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional systems face inefficiencies when processing and managing both encrypted and non-encrypted data on storage media, requiring interruptions in the data stream to process different types of data, which impacts read and write times.

Innovation Solution

A method where user data is encrypted with a well-known key, allowing both encrypted and non-encrypted data to be processed in a single encryption path, using a 'zero key' for user data and application-specific keys for application data, enabling seamless reading and writing without interruptions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If both encrypted and non-encrypted data are written on the storage medium in separate forms, then data security is maintained, but reading and writing operations require interruptions in the data stream to process different types of data, reducing efficiency

Engineering Contradiction:
Improvedata securityVSAvoiddata processing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent merges the processing paths for encrypted and non-encrypted data into a single unified encryption engine. By treating all data as encrypted and using a well-known key (such as a zero key) for user data, the system eliminates the need for separate processing paths and interruptions, while maintaining security through contextual key selection

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent changes the encryption parameter (key) dynamically based on data context rather than changing the processing mode. User data is encrypted with a well-known key while application data uses application-specific keys, allowing the same encryption engine to handle both types continuously without interruptions

Inventive Principle:
Principle #35Parameter changes

2Ease of operation

If the encryption engine is restarted frequently to handle non-encrypted data segments, then data accessibility is maintained, but the overall time to read and write data increases

Engineering Contradiction:
Improvedata accessibilityVSAvoidread and write time
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The patent enables continuous encryption engine operation by eliminating restarts. The encryption engine processes all data segments continuously using the appropriate key for each segment based on contextual identification, maintaining data accessibility while preventing time loss from frequent engine restarts

Inventive Principle:
Principle #20Continuity of useful action

3Reliability

If separate processing paths are used for encrypted and non-encrypted data, then proper security management is achieved, but device complexity increases

Engineering Contradiction:
Improvesecurity managementVSAvoidprocessing path complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent makes the encryption engine universal by enabling it to handle both user data and application data through a single interface. The engine automatically selects the appropriate key based on data context, eliminating the need for multiple specialized processing paths while maintaining proper security management

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS7965844B2System and method for processing user data in an encryption pipeline
Publication Date: 2011.06.21 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US7965844B2 patent drawing
  • US7965844B2 patent drawing
  • US7965844B2 patent drawing

AI summary

A method, system and program are disclosed for efficiently processing host data which comprises encrypted and non-encrypted data and is to be written to a storage medium. The encrypted data is written to the storage medium in encrypted form. The non-encrypted data is encrypted by a storage device using a well known encryption key and written to the storage medium. In this way, the data that is processed by the storage device to and from the storage medium can always be processed through a single encryption engine.