IP Library Granted Patent US 9,143,326
Granted Patent B2
US 9,143,326 · App. 13/760,194 · Granted Sep 22, 2015

Method and system for encrypting data

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,143,326
App. No.
13/760,194
Granted
Sep 22, 2015
Kind
B2
Abstract

A method and system for encrypting data. An initialization is generated. Ciphertext is generated from plaintext by applying the initialization vector and an encryption key to the plaintext. The initialization vector is combined with the ciphertext to generate encrypted data, by using an embedding rule to perform the combining.

Claims (54)

1. A method for encrypting data, said method comprising:

generating, by a processor of a computer system, an initialization vector;

said processor generating ciphertext from plaintext by applying the initialization vector and an encryption key to the plaintext; and

said processor combining the initialization vector with the ciphertext to generate encrypted data, by using an embedding rule to perform said combining, wherein said using the embedding rule comprises generating the encrypted data by a first process or a second process;

wherein the first process comprises:

dividing the initialization vector into a specified number of bits to obtain an ordered sequence of initialization vector fragments,

dividing the ciphertext into a specified number of bits to obtain a plurality of ciphertext fragments, and

distributing the initialization vector fragments in the ordered sequence between the ciphertext fragments of the plurality of ciphertext fragments according to an order of the initialization vector fragments in the ordered sequence;

wherein the second process comprises:

dividing the initialization vector at random positions into initialization vector fragments of different lengths,

dividing the ciphertext at random positions into ciphertext fragments of different lengths, and

distributing the initialization vector fragments of different lengths between the ciphertext fragments of different lengths according to an order that is unrelated to an order of the initialization vector fragments of different lengths in the initialization vector.

2. The method of claim 1 , wherein said generating the initialization vector comprises generating a pseudo-random number as the initialization vector.

3. The method of claim 1 , wherein said generating ciphertext comprises:

dividing the plaintext into N plaintext blocks denoted as B 1 , . . . , B N , wherein Nis an integer of at least 2;

encrypting block B 1 , using the encryption key and the initialization vector to generate cypher block C 1 ;

encrypting block B n using the encryption key and block B n−1 to generate cypher block C n (n=2, . . ., N); and

combining cypher blocks C 1 , . . ., C N to generate the ciphertext.

4. A computer program product, comprising a computer readable storage device having computer readable program code stored therein, said program code containing instructions which, upon being executed by a processor of a computer system, implement a method for encrypting data, said method comprising:

said processor generating an initialization vector;

said processor generating ciphertext from plaintext by applying the initialization vector and an encryption key to the plaintext; and

said processor combining the initialization vector with the ciphertext to generate encrypted data, by using an embedding rule to perform said combining, wherein said using the embedding rule comprises generating the encrypted data by a first process or a second process;

wherein the first process comprises:

dividing the initialization vector into a specified number of bits to obtain an ordered sequence of initialization vector fragments,

dividing the ciphertext into a specified number of bits to obtain a plurality of ciphertext fragments, and

distributing the initialization vector fragments in the ordered sequence between the ciphertext fragments of the plurality of ciphertext fragments according to an order of the initialization vector fragments in the ordered sequence;

wherein the second process comprises:

dividing the initialization vector at random positions into initialization vector fragments of different lengths,

dividing the ciphertext at random positions into ciphertext fragments of different lengths, and

distributing the initialization vector fragments of different lengths between the ciphertext fragments of different lengths according to an order that is unrelated to an order of the initialization vector fragments of different lengths in the initialization vector.

5. The computer program product of claim 4 , wherein said generating the initialization vector comprises generating a pseudo-random number as the initialization vector.

6. The computer program product of claim 4 , wherein said generating ciphertext comprises:

dividing the plaintext into N plaintext blocks denoted as B 1 , . . . , B N , wherein Nis an integer of at least 2;

encrypting block B 1 using the encryption key and the initialization vector to generate cypher block C 1 ;

encrypting block B n using the encryption key and block B n−1 to generate cypher block C n (n=2, . . ., N); and

combining cypher blocks C 1 , . . ., C N to generate the ciphertext.

7. A computer system comprising a processor, a memory coupled to the processor, and a computer readable storage device coupled to the processor, said storage device containing program code which, upon being executed by the processor via the memory, implements a method for encrypting data, said method comprising:

said processor generating an initialization vector;

said processor generating ciphertext from plaintext by applying the initialization vector and an encryption key to the plaintext; and

said processor combining the initialization vector with the ciphertext to generate encrypted data, by using an embedding rule to perform said combining, wherein said using the embedding rule comprises generating the encrypted data by a first process or a second process;

wherein the first process comprises:

dividing the initialization vector into a specified number of bits to obtain an ordered sequence of initialization vector fragments,

dividing the ciphertext into a specified number of bits to obtain a plurality of ciphertext fragments, and

distributing the initialization vector fragments in the ordered sequence between the ciphertext fragments of the plurality of ciphertext fragments according to an order of the initialization vector fragments in the ordered sequence;

wherein the second process comprises:

dividing the initialization vector at random positions into initialization vector fragments of different lengths,

dividing the ciphertext at random positions into ciphertext fragments of different lengths, and

distributing the initialization vector fragments of different lengths between the ciphertext fragments of different lengths according to an order that is unrelated to an order of the initialization vector fragments of different lengths in the initialization vector.

8. The computer system of claim 7 , wherein said generating the initialization vector comprises generating a pseudo-random number as the initialization vector.

9. The computer system of claim 7 , wherein said generating ciphertext comprises:

dividing the plaintext into N plaintext blocks denoted as B 1 , . . . , B N , wherein Nis an integer of at least 2;

encrypting block B 1 using the encryption key and the initialization vector to generate cypher block C 1 ;

encrypting block B n using the encryption key and block B n−1 to generate cypher block C n (n=2, . . ., N); and

combining cypher blocks C 1 , . . ., C N to generate the ciphertext.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 13, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: KYNDRYL, INC.
Reel/Frame 057885/0644 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 6, 2013
From: ONODA, YUSUHIRO
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 029761/0746 →