System and methods for encrypting data utilizing one-time pad key

• US 20060177065A1
• Filed: 07/27/2005
• Published: 08/10/2006
• Est. Priority Date: 02/09/2005
• Status: Abandoned Application

• Current Assignee: Walmart Apollo, LLC (WalMart Inc.)
• Original Assignee: Wal Mart Stores Inc (WalMart Inc.)
• Inventors: Halbert, Scott L.
• Application Number:
  US11/190,612
• Publication Number:
  US 20060177065A1
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator

Abstract

A system and methods for encrypting and decrypting data within an encryption management system. A random number table is generated by concatenating true random numbers. A subset of the random number table is then randomly selected to be used for the generation of a one-time pad key. The one-time pad key is generated by first retrieving random bytes of data from the subset of the random number table using a random offset value and a randomizer value. The retrieved bytes are concatenated together to form the one-time pad key. An exclusive-OR (XOR) operator is applied to the received input data with the one-time pad key to produce an encrypted value representation of the received input data. The random offset value and the randomizer value are stored with the encrypted value, so that the one-time pad key may be subsequently reproduced and used to decrypt the encrypted value.

Claims

1. A method of encrypting data, comprising:

generating a first random number having a first predetermined number of bytes;

extracting a portion of the first random number, wherein the extracted portion has a second predetermined number of bytes;

generating an encryption key from the extracted portion of the first random number, wherein the encryption key includes a plurality of subsets of the extracted portion of the first random number; and

creating an encrypted value by applying an XOR operation to the encryption key and the data.

2. The method of claim 1, wherein extracting a portion of the first random number comprises:

generating a second random number, wherein the second random number has a value between zero and one less than the first predetermined number of bytes divided by the second predetermined number of bytes; and

retrieving the portion of the first random number, wherein the location of the first byte of the portion of the first random number corresponds to the value of the second random number.

3. The method of claim 2, wherein generating an encryption key from the extracted portion of the first random number comprises:

generating a third random number, wherein the third random number has a value between zero and one less than the second predetermined number of bytes;

generating a fourth random number having a value between zero and one less than a predetermined data length;

creating a first pointer, wherein the first pointer corresponds to the value equal to the sum of the third random number and a memory address of the first byte of the extracted portion of the first random number;

extracting a first subset of the extracted portion of the first random number, wherein the first byte of the first subset corresponds to the first pointer and having a length equal to a predetermined offset value;

calculating a high order nibble by applying an XOR operation to the first subset and the fourth random number;

if the high order nibble is EVEN, then creating a second pointer by subtracting a second offset value from the first pointer; and

if the high order nibble is ODD, then creating a second pointer by adding the second offset value to the first pointer;

extracting a second subset of the extracted portion of the first random number, wherein the first byte of the second subset corresponds to the second pointer and having a length equal to the predetermined offset value; and

concatenating the first subset and the second subset.

4. The method of claim 3, further comprising:

if the value of the second pointer is greater than the second predetermined number of bytes, then subtracting the value of the second predetermined number of bytes from the second pointer; and

if the value of the second pointer is less than the location of the first byte of the extracted portion of the first random number, then adding the value of the second predetermined number of bytes to the second pointer.

5. The method of claim 3, further comprising:

formatting the encrypted value to include the second random number, the third random number, and the fourth random number.

6. The method of claim 5, wherein formatting the encrypted value comprises:

shifting a low order nibble of a first byte of the encrypted value to a high order nibble of a second byte of the encrypted value; and

shifting a low order nibble of a third byte of the encrypted value to the low order nibble of the first byte of the encrypted value.

7. The method of claim 6, wherein formatting the encrypted value further comprises:

substituting a special character within the encrypted value with a corresponding predetermined value; and

marking a bit flag indicating that the special character has been substituted with the corresponding predetermined value.

8. A method for decrypting encrypted data, comprising:

extracting a plurality of numeric values from the encrypted data;

generating an encryption key from a random number table having a predetermined number of bytes, wherein the encryption key includes a plurality of subsets of the random number table and each of the plurality of subsets are selected using each of the plurality of numeric values; and

creating a decrypted value by applying an XOR operation to the encryption key and the encrypted data.

9. The method of claim 8, wherein generating an encryption key from a random number table comprises:

creating a first pointer, wherein the first pointer corresponds to the value equal to the sum of a first numeric value of the plurality of numeric values and a memory address of the first byte of the random number table;

extracting a first subset of the random number table identified by a third numeric value of the plurality of numeric values, wherein the first byte of the first subset corresponds to the first pointer and having a length equal to a predetermined offset value;

calculating a high order nibble by applying an XOR operation to the first subset and a second numeric value of the plurality of numeric values;

if the high order nibble is EVEN, then creating a second pointer by subtracting the predetermined number of bytes of the random number table from the first pointer; and

if the high order nibble is ODD, then creating a second pointer by adding the predetermined number of bytes of the random number table to the first pointer;

extracting a second subset of the random number table, wherein the first byte of the second subset corresponds to the second pointer and having a length equal to the predetermined offset size; and

concatenating the first subset and the second subset.

10. The method of claim 9, further comprising:

if the value of the second pointer is greater than the predetermined offset value, then subtracting the predetermined offset value from the second pointer; and

if the value of the second pointer is less than the location of the first byte of the random number table, then adding the predetermined offset value to the second pointer.

11. The method of claim 9, further comprising:

shifting a high order nibble of a first byte of the encrypted data to a low order nibble of a second byte of the encrypted data; and

shifting a low order nibble of a third byte of the encrypted data to a low order nibble of a fourth byte of the encrypted data.

12. The method of claim 9, wherein formatting the encrypted value further comprises:

substituting a predetermined value within the encrypted data with a corresponding special character; and

marking a bit flag indicating that the predetermined value has been substituted with the corresponding special character.

13. A system for encryption of data, comprising:

a random number generator for generating a first random number having a predetermined number of bytes; and

a data encryption processing unit adapted to extract a portion of the first random number, create an encryption key from the extracted portion of the first random number, and apply an XOR operation to the encryption key and the data;

wherein the extracted portion has a second predetermined number of bytes and the encryption key includes a plurality of subsets of the extracted portion of the first random number.

14. The system of claim 13, wherein the random number generator is further adapted to generate a second random number, wherein the second random number has a value between zero and one less than the first predetermined number of bytes divided by the second predetermined number of bytes.

15. The system of claim 14, wherein the data encryption processing unit is further adapted to extract the portion of the first random number at a location corresponding to the second random number.

16. The system of 15, further comprising:

a random number table (RNT) pointer adapted to point to a particular byte of the extracted portion of the first random number, wherein the RNT pointer initially corresponds to the value equal to the sum of a third random number generated by the random number generator and a memory address of the first byte of the extracted portion of the first random number.

17. The system of claim 16, wherein the third random number has a value between zero and one less than the second predetermined number of bytes.

18. The system of claim 16, wherein the data encryption processing unit is further adapted to extract a first subset of the extracted portion of the first random number having a first byte that corresponds to the RNT pointer.

19. The system of claim 18, wherein the data encryption processing unit is further adapted to calculate a Boolean value by applying an XOR operation to the first subset and a fourth random number generated by the random number generator, wherein the fourth random number has a value between zero and one less than a predetermined data length.

20. The system of claim 19, wherein the data encryption processing unit is further adapted to subtract an offset value from the RNT pointer if the Boolean value is TRUE and add the offset value to the RNT pointer if the Boolean value is FALSE.

21. The system of claim 20, wherein the data encryption processing unit is further adapted to extract a second subset of the extracted portion of the random number and create the encryption key by concatenating the first subset with the second subset, wherein the first byte of the second subset corresponds to the RNT pointer.

22. A computer-readable medium for encrypting data having computer executable instructions for performing steps comprising:

generating a first random number having a first predetermined number of bytes;

extracting a portion of the first random number, wherein the extracted portion has a second predetermined number of bytes;

generating an encryption key from the extracted portion of the first random number, wherein the encryption key includes a plurality of subsets of the extracted portion of the first random number; and

creating an encrypted value by applying an XOR operation to the encryption key and the data.

23. The computer-readable medium of claim 22, wherein extracting a portion of the first random number comprises:

generating a second random number, wherein the second random number has a value between zero and one less than the first predetermined number of bytes divided by the second predetermined number of bytes; and

retrieving the portion of the first random number, wherein the location of the first byte of the portion of the first random number corresponds to the value of the second random number.

24. The computer-readable medium of claim 23, wherein generating an encryption key from the extracted portion of the first random number comprises:

generating a third random number, wherein the third random number has a value between zero and one less than the second predetermined number of bytes;

generating a fourth random number having a value between zero and one less than a predetermined data length;

creating a first pointer, wherein the first pointer corresponds to the value equal to the sum of the third random number and a memory address of the first byte of the extracted portion of the first random number;

extracting a first subset of the extracted portion of the first random number, wherein the first byte of the first subset corresponds to the first pointer and having a length equal to a predetermined offset value;

calculating a Boolean value by applying an XOR operation to the first subset and the fourth random number;

if the Boolean value is TRUE, then creating a second pointer by subtracting a second offset value from the first pointer; and

if the Boolean value is FALSE, then creating a second pointer by adding the second offset value to the first pointer;

extracting a second subset of the extracted portion of the first random number, wherein the first byte of the second subset corresponds to the second pointer and having a length equal to the predetermined offset value; and

concatenating the first subset and the second subset.

25. The computer-readable medium of claim 24, wherein the computer-executable instructions further comprise:

if the value of the second pointer is greater than the second predetermined number of bytes, then subtracting the value of the second predetermined number of bytes from the second pointer; and

if the value of the second pointer is less than the location of the first byte of the extracted portion of the first random number, then adding the value of the second predetermined number of bytes to the second pointer.

26. The computer-readable medium of claim 24, wherein the computer-executable instructions further comprise:

formatting the encrypted value to include the second random number, the third random number, and the fourth random number.

27. The computer-readable medium of claim 26, wherein formatting the encrypted value comprises:

shifting a low order nibble of a first byte of the encrypted value to a high order nibble of a second byte of the encrypted value; and

shifting a low order nibble of a third byte of the encrypted value to the low order nibble of the first byte of the encrypted value.

28. The computer-readable medium of claim 27, wherein formatting the encrypted value further comprises:

substituting a special character within the encrypted value with a corresponding predetermined value; and

marking a bit flag indicating that the special character has been substituted with the corresponding predetermined value.

29. A computer-readable medium for decrypting data having computer executable instructions for performing steps comprising:

extracting a plurality of numeric values from the encrypted data;

generating an encryption key from a random number table having a predetermined number of bytes, wherein the encryption key includes a plurality of subsets of the random number table and each of the plurality of subsets are selected using each of the plurality of numeric values; and

creating a decrypted value by applying an XOR operation to the encryption key and the encrypted data.

30. The computer-readable medium of claim 29, wherein generating an encryption key from a random number table comprises:

creating a first pointer, wherein the first pointer corresponds to the value equal to the sum of a first numeric value of the plurality of numeric values and a memory address of the first byte of the random number table;

extracting a first subset of the random number table identified by a third numeric value of the plurality of numeric values, wherein the first byte of the first subset corresponds to the first pointer and having a length equal to a predetermined offset value;

calculating a Boolean value by applying an XOR operation to the first subset and a second numeric value of the plurality of numeric values;

if the Boolean value is TRUE, then creating a second pointer by subtracting the predetermined number of bytes of the random number table from the first pointer; and

if the Boolean value is FALSE, then creating a second pointer by adding the predetermined number of bytes of the random number table to the first pointer;

extracting a second subset of the random number table, wherein the first byte of the second subset corresponds to the second pointer and having a length equal to the predetermined offset size; and

concatenating the first subset and the second subset.

31. The computer-readable medium of claim 30, wherein the computer-executable instructions further comprise:

if the value of the second pointer is greater than the predetermined offset value, then subtracting the predetermined offset value from the second pointer; and

if the value of the second pointer is less than the location of the first byte of the random number table, then adding the predetermined offset value to the second pointer.

32. The computer-readable medium of claim 30, wherein the computer-executable instructions further comprise:

shifting a high order nibble of a first byte of the encrypted data to a low order nibble of a second byte of the encrypted data; and

shifting a low order nibble of a third byte of the encrypted data to a low order nibble of a fourth byte of the encrypted data.

33. The computer-readable medium of claim 30, wherein formatting the encrypted value further comprises:

substituting a predetermined value within the encrypted data with a corresponding special character; and

marking a bit flag indicating that the predetermined value has been substituted with the corresponding special character.