Transparent Encryption Research Articles

Transparent Encryption for External Storage Media with Mobile-Compatible Key Management by Crypto Ciphershield

Evidently, there is a widespread adoption of external storage devices in contemporary situations, including USB sticks, SD cards, and flash memory devices. If, on the other hand, these devices are misplaced or lost, the presence of sensitive data on them can provide a potential security risk. The currently available encryption solutions frequently have usability issues, which necessitate that users continually input keys or login credentials across a variety of portable devices. The study offers a solution that overcomes these difficulties by integrating key caching with time-delayed deletion within the MobileShielded Encryption Framework (MoSEF). This method is our reaction to the problem. There are two distinct iterations of this idea that we have developed. The initial version, which functions flawlessly even in the absence of deliberate user intervention, achieves this by restricting the use of external storage to only temporary data transfers.Within the file system, the second variant makes it possible to handle numerous encryption keys for different files. This is made possible by a trusted host on the file system. By eliminating the need to share keys or passwords, timed key caching significantly improves both the level of security and the level of usability of a system. In addition to ensuring interoperability with mobile devices, our solution, which is incorporated within the MoSEF architecture, provides plaintext encryption for external storage media. To reduce the likelihood of data breaches and illegal access, this strategy offers users a mechanism that is both convenient and safe for managing sensitive data when they are on the move.

Transparent Encryption of Nanostructured Photonic Patterns by Erasing the Structural Colors of Visible Patterns: Implications for Anti-Counterfeiting and Information Encryption Applications

Transparent Encryption of Nanostructured Photonic Patterns by Erasing the Structural Colors of Visible Patterns: Implications for Anti-Counterfeiting and Information Encryption Applications

Performance testing on Transparent Data Encryption for SQL Server's reliability and efficiency

Data security is being one of the most crucial aspects to be focused on system development. However, using such a feature to enhance the security of data might affect the system's performance. This study aims to observe how substantial Transparent Data Encryption as a solution for data security on Microsoft SQL Server will affect the database management system's performance. Each of the system performance is conducted with stress and load test. This paper concentrates on the upsides of using Transparent Data Encryption over standard database by finding how significant performance degradation has occurred in terms of Reliability and Efficiency.

Encryption Algorithm of Automatic Single Chip Computer and Embedded System Based on Big Data

With the rapid development of network technology and communication technology, modern society is rapidly transforming towards an information society based on big data. The single-chip microcomputer and embedded system have received widespread attention from all walks of life since they came out. Now it has fully penetrated into people’s daily work and life. In this regard, it is of great significance to study the encryption algorithms of automated single-chip microcomputers and embedded systems based on big data. The purpose of this article is to study the encryption algorithm of the automatic single-chip microcomputer and embedded system based on big data. This article adopts research methods such as literature data method, mathematical statistics method, and logical analysis method to study the encryption algorithm of automatic single-chip computer and embedded system based on big data. It mainly optimizes and adjusts the existing data encryption algorithm and strengthens the information. Through the normal test and abnormal test of the data encryption system, it can be seen that the system can encrypt and store data, which can be said to realize transparent encryption and decryption in the process of reading and writing. Studies have shown that although the system’s built-in function takes 5-6 seconds to open a file, the time it takes for the function to open a file is between 45-48 seconds, which takes a little longer. When reading the specified data from the specified file, the correct data can be read only by providing a consistent key. It can be seen that the system is equivalent to providing data security measures in two aspects: identity authentication and data encryption. This design scheme can effectively protect the data security of the system.

Secure Video Surveillance Framework in Smart City.

In the construction process of smart cities, more and more video surveillance systems have been deployed for traffic, office buildings, shopping malls, and families. Thus, the security of video surveillance systems has attracted more attention. At present, many researchers focus on how to select the region of interest (RoI) accurately and then realize privacy protection in videos by selective encryption. However, relatively few researchers focus on building a security framework by analyzing the security of a video surveillance system from the system and data life cycle. By analyzing the surveillance video protection and the attack surface of a video surveillance system in a smart city, we constructed a secure surveillance framework in this manuscript. In the secure framework, a secure video surveillance model is proposed, and a secure authentication protocol that can resist man-in-the-middle attacks (MITM) and replay attacks is implemented. For the management of the video encryption key, we introduced the Chinese remainder theorem (CRT) on the basis of group key management to provide an efficient and secure key update. In addition, we built a decryption suite based on transparent encryption to ensure the security of the decryption environment. The security analysis proved that our system can guarantee the forward and backward security of the key update. In the experiment environment, the average decryption speed of our system can reach 91.47 Mb/s, which can meet the real-time requirement of practical applications.

Research on the communication mechanism between entities based on end-to-end credible state assessment

In the information age, with the development of internet technology, there are more and more various business services, at the same time, network security issues are also increasing. However, traditional protection methods are gradually hard to cope with the complex network environment. Aiming at the credible connection establishment and data communication problems that need to be solved urgently in the credible network, an interentity communication mechanism based on end-to-end credibility assessment is proposed. This mechanism combines trusted computing with network access control mechanisms, integrates network access authority control technology, server identity authentication technology, communication subject measurement technology and network link transparent encryption technology, adopts real-time monitoring of terminal status, dynamic adjustment of access authorities, optimized network access control mechanism and data transmission method, to against security issues of the network communication. After security analysis, this mechanism improves the security of the connection and communication between the terminal and the network. It can effectively avoid security threats to information systems, and make the service of the information system safe and reliable.

Secure Outsourcing and Sharing of Cloud Data Using a User-Side Encrypted File System

Cloud computing is an emerging paradigm that aims to provide computing resources, massive data storage capacity and, flexible data sharing services. The explosive growth of data produced persuade business and users, driven by the cloud-top features, to outsource their data to the cloud storage systems. However, the confidentiality and integrity of outsourced sensitive data in remote cloud servers are becoming a major concern. Data must be encrypted prior to storing it in the, potentially untrustworthy cloud. Existing traditional encryption systems impose a heavy burden of managing files and encryption operations on data owners. They suffer from serious security, efficiency, and usability issues, and some schemes are inappropriate for protecting cloud data. In this paper, we introduce OutFS, a user-side encrypted file system, focused on providing a transparent encryption for stored and shared outsourced data. In OutFS, we utilize a hybrid encryption scheme structure based on symmetric and asymmetric methods. The key management is conveniently designed. In order to ensure robust data sharing security, the identity-based encryption scheme (IBE) is integrated with OutFS. OutFS is designed to preserve the integrity of outsourced file data and file system data structure. Analysis of performance and experimental results show that OutFS is efficient. It can achieve an average throughput of 8.8 MB/sec, and 10.5 MB/sec for writing and reading outsourced files. Security analysis indicates that OutFS is extremely secure and robust against attacks such as brute-force, eavesdropping, man-in-the-middle, and offline-dictionary attacks.

Transparent Encryption Technique for Trusted Computing

Trusted computing is a technology that has been developed to make a computer safer and more trustworthy. The main purpose of trusted computing is to ensure that only authorized user will be able to use and access information stored inside the computer. Although the current trusted computing technology is capable of providing the level of trustworthiness required, it is still subjected to physical attack. In order to solve this problem, the TPM-UAM model has been proposed. However, in order to provide better protection, it is important that data inside the computer to be encrypted whenever it is not used and decrypted whenever it needs to be used. A number of encryption techniques are available such as RSA, AES, DES/3DES, Twofish, Blowfish, IDEA, SEAL, RC4. However, time taken for encrypting and decrypting data by using these techniques is huge. This paper describes a research work that is currently undertaken in order to develop a new encryption mechanism that can provide very fast and transparent encryption and decryption services for trusted computers.

Multi-security-level cloud storage system based on improved proxy re-encryption

Based on the characteristics and data security requirements of the cloud environment, we present a scheme for a multi-security-level cloud storage system that is combined with AES symmetric encryption and an improved identity-based proxy re-encryption (PRE) algorithm. Our optimization includes support for fine-grained control and performance optimization. Through a combination of attribute-based encryption methods, we add a fine-grained control factor to our algorithm in which each authorization operation is only valid for a single factor. By reducing the number of bilinear mappings, which are the most time-consuming processes, we achieve our aim of optimizing performance. Last but not least, we implement secure data sharing among heterogeneous cloud systems. As shown in experiment, our proposed multi-security-level cloud storage system implements services such as the direct storage of data, transparent AES encryption, PRE protection that supports fine-grained and ciphertext heterogeneous transformation, and other functions such as authentication and data management. In terms of performance, we achieve time-cost reductions of 29.8% for the entire process, 48.3% for delegation and 47.2% for decryption.

No-Reference Quality Evaluator of Transparently Encrypted Images

In past years, various encrypted algorithms have been proposed to fully or partially protect the multimedia content in view of practical applications. In the context of digital TV broadcasting, transparent encryption only protects partial content and fulfills both security and quality requirements. To date, only a few reference-based works have been reported to evaluate the quality of transparently encrypted images. However, these works are incapable of reference-unavailable conditions. In this paper, we conduct the first attempt that proposes a novel quality evaluator in the absence of reference images. The key strategy of the proposed metric lies in extracting features by considering the motivation of transparently encrypted images. Specifically, given that encrypted images prevent content from being easily recognized, several features, including correlation coefficient, information entropy, and intensity statistic, are preliminarily extracted to estimate visual recognizability. Meanwhile, considering that encrypted images are avoided since they are of extremely low quality, we also capture many features to measure the distortions on multiple quality-sensitive image attributes, such as naturalness, structure, and texture. Finally, the quality evaluator is built by bridging all extracted features and corresponding quality scores via a regression module. Experimental results demonstrate that the proposed method is superior to the mainstream no-reference quality evaluation methods designed for synthetically distorted images and possesses a close approximation to state-of-the-art reference-based methods designed for encrypted images.

Atlas: Application Confidentiality in Compromised Embedded Systems

Due to the requirements of the Internet-of-Things, modern embedded systems have become increasingly complex, running different applications. In order to protect their intellectual property as well as the confidentiality of sensitive data they process, these applications have to be isolated from each other. Traditional memory protection and memory management units provide such isolation, but rely on operating system support for their configuration. However, modern operating systems tend to be vulnerable and cannot guarantee confidentiality when compromised. We present Atlas, a hardware-based security architecture, complementary to traditional memory protection mechanisms, ensuring code and data confidentiality through transparent encryption, even when the system software has been exploited. Atlas relies on its zero-software trusted computing base to protect against system-level attackers and also supports secure shared memory. We implemented Atlas based on the LEON3 softcore processor, including toolchain extensions for developers. Our FPGA-based evaluation shows minimal cycle overhead at the cost of a reduced maximum frequency.

Research and Application of Transparent File Encryption Technology on Android Platform

Aiming at the data security problem of Android platform, a transparent encryption system based on file filter driver is designed and implemented, according to the technology of file transparent encryption and decryption system based on hook transparent encryption technology and file filtering driven transparent encryption technology used on windows platform. This system is different from the traditional APP development method of Android system. By intercepting the system call function and using the secret-key converted from the host MAC address, the encryption and decryption algorithm is written into the kernel, which fundamentally guarantees the security of user information. At the same time, the user's security experience is improved by putting authentication on the screen unlocking. The system design and implementation are described in this paper from system requirement analysis to overall design and detailed design of each module. Android application development technology and cross-compiling principle are used in the coding process. The system test results show that the system can effectively transparently encrypt files and protect the privacy of mobile files.

On the Circumstantial Context of J. S. Bach’s Canon super Fa Mi BWV 1078

«Вестник Санкт-Петербургского университета. Искусствоведение» — научно-теоретический рецензируемый журнал, обобщающий результаты исследований ученых всего мира в различных областях искусства, включая музыковедение, культурологию и художественное образование.

Design of Data Protection Model for Power Business Terminal Based on OTFE

A data security protection model based on OTFE is designed for security problems such as data leakage in power business terminal. This paper uses file system filter driver technology and CRT-AES encryption & decryption algorithm to achieve the transparent encryption and decryption of terminal sensitive data. Controlling the user’s permissions to access and transmit terminal sensitive data according to the terminal data policy, and recording data operation process by operation log. Proved by examples, this model can encrypt the storage and control transmission of the terminal data, and provide the effectively theoretical basis for the security of the terminal data.

Electronic Document Secure Management System Based on Content Analysis for Enterprise

Electronic document management system is a critical component of enterprise. To enhance the security of the management system was not only by Public Key Infrastructure (PKI), such as public key, private key, and symmetric key based encryption and decryption, digital signature, and the key and certificate automatic management, but also by intelligent text analysis, which extracted word weight info automatically to generate security level of the doc using centroid-based classification and integration with experts’ experience, and combined file’s attributes to classify the electronic docs into the managed directory and database, and to locate the electronic docs, while checking the security level of the doc to control the access. Meantime, we used the plugin for the doc transparent encryption and decryption, and the digest signature with system-side private key for all docs. Furthermore, we utilized the user interface (UI) for users’ convenience, which employed a partial submission strategy, improving the efficiency of the doc management.

Transparent encryption with scalable video communication: Lower-latency, CABAC-based schemes

Selective encryption masks all of the content without completely hiding it, as full encryption would do at a cost in encryption delay and increased bandwidth. Many commercial applications of video encryption do not even require selective encryption, because greater utility can be gained from transparent encryption, i.e. allowing prospective viewers to glimpse a reduced quality version of the content as a taster. Our lightweight selective encryption scheme when applied to scalable video coding is well suited to transparent encryption. The paper illustrates the gains in reducing delay and increased distortion arising from a transparent encryption that leaves reduced quality base layer in the clear. Reduced encryption of B-frames is a further step beyond transparent encryption in which the computational overhead reduction is traded against content security and limited distortion. This spectrum of video encryption possibilities is analyzed in this paper, though all of the schemes maintain decoder compatibility and add no bitrate overhead as a result of jointly encoding and encrypting the input video by virtue of carefully selecting the entropy coding parameters that are encrypted. The schemes are suitable both for H.264 and HEVC codecs, though demonstrated in the paper for H.264. Selected Content Adaptive Binary Arithmetic Coding (CABAC) parameters are encrypted by a lightweight Exclusive OR technique, which is chosen for practicality.

The Cloud Technology Double Live Data Center Information System Research and Design Based on Disaster Recovery Platform

In the current information age, usually the data resources are much higher than the value of the computer equipment itself. In recent years, with the rapid development of network technology, the formation of a high concentration of data stored in the network environment, the simplified data management, improve operational efficiency, reduce the cost of investment at the same time, the data security is experiencing more severe test. As a kind of data disaster recovery data security technology, through a complete copy of the data in real time to the disaster recovery center, in order to keep a copy of the basic means of providing a last line of defense for the security of the data. Since the disaster recovery started, people have made a lot of research, but there are still some problems first, as the diversification of the storage subsystem structure of infrastructure, so to build a disaster recovery system need to do a lot of personalized treatment followed by a single, storage technology has been unable to meet the needs of various industries on the disaster intensity of third and if the security of the backup data cannot be guaranteed, for sensitive confidential data, even worse than no backup. To solve the above problems, this paper related to the key technology of disaster recovery data backup based on virtual storage research, the main work is as follows. Based on the characteristics of storage technology in disaster tolerant system in the analysis, choose to use the virtual storage technology support as the basis of disaster recovery system to realize data backup, and through in-depth analysis of the virtual storage technology and its application status in the disaster recovery system, pointed out that the current application of virtual storage technology in disaster tolerant system in the challenge and the starting point of this article. Analysis of the structure of the internal computer system with virtual memory and the disaster recovery system based on the needs of the design of a virtual network storage model and disaster tolerant architecture based on this model. The advantages and disadvantages of three virtual memory mapping mechanism at present, designed for disaster recovery system virtual memory mapping mechanism and cache mechanism. On the basis of this mapping mechanism is established on data disaster tolerance strategy can be realized, and the upper user language abstraction, form a complete set of disaster recovery mechanism. Through a detailed analysis of the virtual disk transparent encryption mechanism, proposed the use of the mechanism to realize the transparent protection of backup data, combined with the characteristics of backup data, and optimized the virtual disk transparent encryption mechanism, focus on strengthening the management of keys, the encryption mechanism is analyzed on how the role of disaster recovery system. Quasi double live disaster recovery storage based cloud computing data center technology problems of the equipment malfunction need to manually switch the business system, business recovery time. In order to solve this problem, this paper uses Net App 3250 double live disaster recovery storage technology Metro Cluster to build a double live a real sense of cloud computing data center. When the double live data center renyiyitai main memory based equipment malfunction, another main memory automatically and quickly take over the business, to achieve zero down live migration, to ensure the continued operation of the business system, provide a solid guarantee for the information construction unit.

Interoperable conditional access with video selective encryption for portable devices

The pay-TV industry seeks to extend its reach to portable display devices. At the same time, it seeks to ensure a horizontal market by making interoperable the Conditional Access Systems (CASs) employed to protect content. To achieve interoperability for such devices, this paper proposes a form of selective encryption for video that allows simultaneous distribution of a small percentage of video data on a per-CAS basis, allowing sharing of the unencrypted video between the CASs. The bitrate overhead for each additional CAS enabled is found to be on average 7.41 %, whereas the computational overhead amounts to no more than 40 ms for the benchmark sequences tested. Adaptation of CAS to transparent encryption of scalable video is also demonstrated in this paper.

Cross-access Method for Team Confidential Document Based on Offline Key Management

Existing personal and network encryption application modes are summarized, and a new kind of offline team confidential document application mode is defined and analyzed for satisfying special confidential demand in practical. In this mode, confidential electronic documents are classified by team’s role. Team is the smallest unit of key distribution, and access authority is allowed to be delivered between teams. PKI system dependable on Intranet or Internet is forbidden to use in this mode. In response, a cross-access method based on offline key management for this new mode is proposed, algorithms for authorization, encryption, authentication, and decryption in this method are described in detail through an implement example of transparent encryption system using Microsoft Office plug-in technology.

Scalability architecture for a secure big data system

Security has become a major concern for nowadays enterprises that wish to protect and store their valuable and volatile data in an efficient and scalable way. However, companies have avoided the use of encrypted information, fearing an overload of the database management system (DBMS) due to a slight increase in datas computational time and size. This article tries to interpret this problem and offer an adequate solution by analysing and comparing two current approaches: Oracle transparent data encryption and encryption standards provided by MySQL. To test these services, we are going to use benchmark TPC-H which provides a reliable, standardised and certified way of evaluating the possibility of using these 'instruments' to safeguard stored information. The results are going to be compared with ongoing systems (which do not include safety procedures) and scaled up (improving performance) through multiple scalability mechanisms (table partition, indexes, NoSQL, etc.).