IP Library Granted Patent US 9,344,274
Granted Patent B2
US 9,344,274 · App. 14/735,292 · Granted May 17, 2016

Method and system for encrypting data

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,344,274
App. No.
14/735,292
Granted
May 17, 2016
Kind
B2
Abstract

A method and system for encrypting data. Ciphertext is generated from plaintext by applying an initialization vector and an encryption key to the plaintext. The initialization vector is combined with the ciphertext to generate encrypted data, by using an embedding rule to perform the combining.

Claims (58)

1. A method for encrypting data, said method comprising:

generating, by a processor of a computer system, ciphertext from plaintext by applying an initialization vector and an encryption key to the plaintext; and

said processor combining the initialization vector with the ciphertext to generate encrypted data, by using an embedding rule to perform said combining,

wherein said generating ciphertext comprises:

dividing the plaintext into N plaintext blocks denoted as B 1 , . . . , B N , wherein Nis an integer of at least 2;

encrypting block B 1 using the encryption key and the initialization vector to generate cypher block C 1 ;

encrypting block B n , using the encryption key and block B n-1 to generate cypher block C n (n=2, . . . , N); and

combining cypher blocks C 1 , . . . , C N to generate the ciphertext.

2. The method of claim 1 , wherein the initialization vector is a pseudo-random number.

3. The method of claim 1 , wherein said using the embedding rule comprises generating the encrypted data by attaching the initialization vector to the beginning or end of the ciphertext.

4. The method of claim 1 , wherein said using the embedding rule comprises generating the encrypted data by:

dividing the initialization vector into a specified number of bits to obtain an ordered sequence of initialization vector fragments;

dividing the ciphertext into a specified number of bits to obtain ciphertext fragments; and

distributing the initialization vector fragments between the ciphertext fragments according to the order of the initialization vector fragments in the sequence.

5. The method of claim 1 , wherein said using the embedding rule comprises generating the encrypted data by:

dividing the initialization vector at random positions into initialization vector fragments of different lengths;

dividing the ciphertext at random positions into ciphertext fragments of different lengths; and

distributing the initialization vector fragments between the ciphertext fragments according to an order that is unrelated to the order of the initialization vector fragments in the sequence.

6. The method of claim 1 , said method further comprising:

said processor retrieving, from a storage unit, a process for determining the embedding rule; and

said processor performing the process to determine the embedding rule.

7. The method of claim 6 , wherein said performing the process comprises using the first two bits of the ciphertext to determine the embedding rule.

8. A computer program product, comprising a computer readable storage device having computer readable program code stored therein, said program code containing instructions which, upon being executed by a processor of a computer system, implement a method for encrypting data, said method comprising:

said processor generating ciphertext from plaintext by applying an initialization vector and an encryption key to the plaintext; and

said processor combining the initialization vector with the ciphertext to generate encrypted data, by using an embedding rule to perform said combining,

wherein said generating ciphertext comprises:

dividing the plaintext into N plaintext blocks denoted as B 1 , . . . , B N , wherein Nis an integer of at least 2;

encrypting block B 1 using the encryption key and the initialization vector to generate cypher block C 1 ;

encrypting block B n using the encryption key and block B n-1 to generate cypher block C n (n=2, . . . , N); and

combining cypher blocks C 1 , . . . , C N to generate the ciphertext.

9. The computer program product of claim 8 , wherein the initialization vector is a pseudo-random number.

10. The computer program product of claim 8 , wherein said using the embedding rule comprises generating the encrypted data by attaching the initialization vector to the beginning or end of the ciphertext.

11. The computer program product of claim 8 , wherein said using the embedding rule comprises generating the encrypted data by:

dividing the initialization vector into a specified number of bits to obtain an ordered sequence of initialization vector fragments;

dividing the ciphertext into a specified number of bits to obtain ciphertext fragments; and

distributing the initialization vector fragments between the ciphertext fragments according to the order of the initialization vector fragments in the sequence.

12. The computer program product of claim 8 , wherein said using the embedding rule comprises generating the encrypted data by:

dividing the initialization vector at random positions into initialization vector fragments of different lengths;

dividing the ciphertext at random positions into ciphertext fragments of different lengths; and

distributing the initialization vector fragments between the ciphertext fragments according to an order that is unrelated to the order of the initialization vector fragments in the sequence.

13. A computer system comprising a processor, a memory coupled to the processor, and a computer readable storage device coupled to the processor, said storage device containing program code which, upon being executed by the processor via the memory, implements a method for encrypting data, said method comprising:

said processor generating ciphertext from plaintext by applying an initialization vector and an encryption key to the plaintext; and

said processor combining the initialization vector with the ciphertext to generate encrypted data, by using an embedding rule to perform said combining,

wherein said generating ciphertext comprises:

dividing the plaintext into N plaintext blocks denoted as B 1 , . . . , B N , wherein Nis an integer of at least 2;

encrypting block B 1 using the encryption key and the initialization vector to generate cypher block C 1 ;

encrypting block B n using the encryption key and block B n-1 to generate cypher block C n (n=2, . . . , N); and

combining cypher blocks C 1 , . . . , C N to generate the ciphertext.

14. The computer system of claim 13 , wherein the initialization vector is a pseudo-random number.

15. The computer system of claim 13 , wherein said using the embedding rule comprises generating the encrypted data by attaching the initialization vector to the beginning or end of the ciphertext.

16. The computer system of claim 13 , wherein said using the embedding rule comprises generating the encrypted data by:

dividing the initialization vector into a specified number of bits to obtain an ordered sequence of initialization vector fragments;

dividing the ciphertext into a specified number of bits to obtain ciphertext fragments; and

distributing the initialization vector fragments between the ciphertext fragments according to the order of the initialization vector fragments in the sequence.

17. The computer system of claim 13 , wherein said using the embedding rule comprises generating the encrypted data by:

dividing the initialization vector at random positions into initialization vector fragments of different lengths;

dividing the ciphertext at random positions into ciphertext fragments of different lengths; and

distributing the initialization vector fragments between the ciphertext fragments according to an order that is unrelated to the order of the initialization vector fragments in the sequence.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 13, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: KYNDRYL, INC.
Reel/Frame 057885/0644 →
CORRECTIVE ASSIGNMENT TO CORRECT THE CONVEYING PARTY DATA PREVIOUSLY RECORDED AT REEL: 035814 FRAME: 0406. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Jun 18, 2015
From: ONODA, YASUHIRO
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 035951/0231 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 10, 2015
From: ONODA, YASUHIRO
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 035814/0406 →