Multi-key graphic cryptography for encrypting file system acceleration
AssigneeIntel Corporation
InventorYEN HSIANG CHEW
Life of this patent
Estimating the term…
Abstract
Embodiments of methods and systems for encrypting and decrypting with encryption attributes are presented. An encryption attribute contains information to identify one or more segments of a file to be encrypted. An encryption process encrypts those one or more segments to generate a partly encrypted file instead of encrypting the entire file. That is, the file includes some data that are encrypted and some data that are not. In one embodiment, at least three encryption keys are used such that the encryption attribute is encrypted with using a third key.
Claims19
1-26. (canceled)
A method comprising:
- identifying one or more segments of a plurality of segments of first data as one or more candidates for encryption, wherein the first data is associated with an encryption attribute, and wherein the one or more segments are identified from the plurality of segments using the encryption attribute and one or more rules;
- selectively encrypting, using the first key, the one or more segments of the first data to generate a partly encrypted data file, wherein the partly encrypted data file includes the encrypted one or more segments of the first data;
- encrypting, using a second key, the first key, wherein the second key is a public key;
- encrypting, using a third key, the encryption attribute to create an encrypted encryption attribute;
- and
- generating second data including the partly encrypted data file and the encrypted encryption attribute.
A system comprising:
- file segmenting logic to identify one or more segments of a plurality of segments of first data as one or more candidates for encryption, wherein the first data is associated with an encryption attribute, and wherein the one or more segments are identified from the plurality of segments using the encryption attribute and one or more rules;
- first encryption engine to selectively encrypt, using the first key, the one or more segments of the first data to generate a partly encrypted data file, wherein the partly encrypted data file includes the encrypted one or more segments of the first data;
- second encryption engine to encrypt, using a second key, the first key, wherein the second key is a public key;
- third encryption engine to encrypt, using a third key, the encryption attribute to create an encrypted encryption attribute;
- and
- generator to generate second data including the partly encrypted data file and the encrypted encryption attribute.
At least one machine-readable medium comprising instructions which, when executed by a processing device, causes the processing device to:
- identify one or more segments of a plurality of segments of first data as one or more candidates for encryption, wherein the first data is associated with an encryption attribute, and wherein the one or more segments are identified from the plurality of segments using the encryption attribute and one or more rules;
- selectively encrypt, using the first key, the one or more segments of the first data to generate a partly encrypted data file, wherein the partly encrypted data file includes the encrypted one or more segments of the first data;
- encrypt, using a second key, the first key, wherein the second key is a public key;
- encrypt, using a third key, the encryption attribute to create an encrypted encryption attribute;
- and
- generate second data including the partly encrypted data file and the encrypted encryption attribute.
Dependencies are inferred from the claim text.