Wrapped Encryption Layers for Selective Data Revelation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing encryption protocols fail to selectively reveal different data items within a dataset, as they either reveal the entire dataset or none of it, posing a challenge when the dataset contains information of varying importance or sensitivity.

Innovation Solution

A wrapped encryption protocol where each data item is encrypted with multiple layers of encryption, allowing selective revelation based on the number of encryption layers removed by decryption keys.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional encryption protocols are used to encrypt a dataset, then the data is protected from unauthorized access, but the entire dataset is either revealed or none of it, making it impossible to selectively reveal different data items

Engineering Contradiction:
Improvedata confidentialityVSAvoidselective data revelation
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent segments the dataset into individual data items and applies separate encryption layers to each item. Instead of encrypting the entire dataset as a single unit, each data item is independently encrypted with its own encryption key, allowing selective decryption and revelation of specific items based on authorization levels.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements a nested encryption structure where multiple encryption layers are applied to data items in sequence. Each data item is wrapped in successive encryption layers, with inner layers having higher security requirements. This nested structure enables progressive revelation of data items based on the number of decryption keys possessed by the accessing party.

Inventive Principle:
Principle #7Nested doll (Nesting)

2Adaptability or versatility

If multiple encryption keys are used to encrypt different data items, then selective access control is enabled, but the encryption system becomes more complex

Engineering Contradiction:
Improveselective data access controlVSAvoidencryption system complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent assigns different security properties to different data items based on their sensitivity and importance. Each data item can have a customized number of encryption layers and associated access controls, rather than applying a uniform encryption scheme to the entire dataset. This local quality approach enables fine-grained access control while maintaining simplicity for less sensitive data.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent adds a dimensional aspect to encryption by introducing multiple layers of encryption with different security levels. Instead of a single encryption dimension, the system creates a hierarchical structure where data items can be accessed at different depths based on authorization, transforming the encryption model from flat to multi-dimensional.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS20260039452A1Wrapped encryption
Publication Date: 2026.02.05 NCHAIN LICENSING AG
  • US20260039452A1 patent drawing
  • US20260039452A1 patent drawing
  • US20260039452A1 patent drawing

AI summary

A computer-implemented method of encrypting data by performing the following steps: a) encrypting the first data item with a first respective encryption key to generate a first encrypted value, b) combining a second data item with the first encrypted value to generate a first combined value, c) encrypting the first combined value with a second respective encryption key to generate a second encrypted value, and d) repeating a process of i) combining a respective next data item with a respective latest encrypted value to generate a respective next combined value, and ii) encrypting the respective next combined value with a respective next encryption key to generate a respective next encrypted value, until a combination of the final data item and a respective latest encrypted value has been encrypted with a respective next encryption key to generate a final encrypted value, the encrypted payload comprising the final encrypted value.