Method for writing and reading data

• US 20150046416A1
• Filed: 01/22/2013
• Published: 02/12/2015
• Est. Priority Date: 01/26/2012
• Status: Abandoned Application

• Current Assignee: Ernesto Schobesberger, Rene-Michael Cordes
• Original Assignee: Rene-Michael Cordes
• Inventors: Cordes, Ren-Michael, Schobesberger, Ernesto
• Application Number:
  US14/374,423
• Publication Number:
  US 20150046416A1
• Time in Patent Office: Days
• US Class Current: 707/696
• CPC Class Codes: G06F 16/2272 Management thereof
• CPC Class Codes: G06F 5/01 for shifting, e.g. justifying, scaling, normalising digital stores in which the information is moved stepwise, e.g. shift-registers G11C19/00; digital stores in which the information circulates G11C21/00
• CPC Class Codes: H04L 2209/127 Trusted platform modules [TPM]
• CPC Class Codes: H04L 9/065 Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

A method for writing and reading data into or out of an indexed dataset includes a data structure and an associated index structure, a processing unit that receives data to be written in plain text and writes the data to the data structure by means of write access and updates index data in the index structure. The processing unit detects data to be read out or the memory location thereof by means of access to the index data and reads out a data from the data structure by means of read access and makes the same available in plain text. The data in the data structure and the index data in the index structure are stored in an encrypted manner. Write/read access of the processing unit to the index structure and to the data structure take place via at least one en- and decryption unit.

Claims

1-39. -39. (canceled)

40. A method for writing and reading data into or out of an indexed dataset (1), which comprises a data structure (2) and an associated index structure (3), wherein a processing unit (4) receives data to be written in plain text and writes to the data structure (2) by means of write access and updates index data in the index structure (3) and wherein the processing unit (4) detects data to be read out or the memory location thereof by means of access to the index data (3) and reads out the data to be read out from the data structure (2) by means of read access and makes the same available in plain text, wherein the data in the data structure (2) and the index data in the index structure (3) are stored in an encrypted manner and in that write/read access of the processing unit (4) to the index structure (3) and to the data structure (2) takes place via at least one en- and decryption unit (6, 7), using which the data are en- or decrypted by means of stream cipher.

41. The method according to claim 40, wherein generation of a key stream for the stream cipher takes place using at least one feedback shift register (13;

21, 22, 23;

24, 25;

24, 25, 26), which is filled with a defined sequence of bits for the initialisation thereof.

42. The method according to claim 41, wherein for each write access, a different key stream is used.

43. The method according to claim 41, wherein in each case at least one first sequence of bits (14) and a second sequence of bits (15) is used for initialising the feedback shift register(s) (13;

21, 22, 23;

24, 25;

24, 25, 26).

44. The method according to claim 43, wherein the first and the second sequences of bits (14, 15) are linked with the aid of an XOR function (17) and the sequence of bits resulting from the linking is fed to the feedback shift register (13) for initialisation.

45. The method according to claim 43, wherein at least one first feedback shift register (21, 24) is filled with the first sequence of bits (14) for its initialisation and at least one second feedback shift register (22, 25) is filled with the second sequence of bits (15) for its initialisation.

46. The method according to claim 43, wherein an index number assigned to the data record to be encrypted or decrypted is chosen as first sequence of bits (14).

47. The method according to claim 43, wherein the second sequence of bits (15) is generated from a unique identifier of the database.

48. The method according to claim 43, wherein a third sequence of bits (16) is furthermore used for initialising the feedback shift register(s) (13;

21, 22, 23;

24, 25;

24, 25, 26).

49. The method according to claim 48, wherein the third sequence of bits (16) is generated from a unique identifier of the respective user.

50. The method according to claim 48, wherein the third sequence of bits (16) is fed to a third feedback shift register (23, 26) for initialisation.

51. The method according to claim 45, wherein the feedback shift registers (13;

21, 22, 23;

24, 25;

24, 25, 26) are filled with the respective sequence of bits (14, 15, 16) at the same time.

52. The method according of claim 41, wherein at least one XOR gate (XORp1, XORp2, XORp3, XORp4, XORpp1, XORppp1) is used for the feedback of the shift register(s) (13;

21, 22, 23;

24, 25;

24, 25, 26).

53. The method according of claim 52, wherein the feedback shift registers (13;

21, 22, 23;

24, 25;

24, 25, 26) are connected to one another in such a manner that the at least one XOR gate (XORp1, XORp2, XORp3, XORp4, XORpp1, XORppp1) of the one shift register is switched on or off depending on the state of the other shift register.

54. The method according to claim 52, wherein the at least one feedback shift register (13;

21, 22, 23;

24, 25;

24, 25, 26) has a plurality of storage elements (FF1, FF2, . . . ;

FFp1, FFp2, . . . ;

FFpp1, FFpp2, . . . ) connected to form a code-producing series, wherein an output of the last storage element in the series is connected to an input of the first storage element in the series to form a circuit, wherein the feedback takes place with the aid of the at least one XOR gate (XORp1, XORp2, XORp3, XORp4, XORpp1, XORppp1) in such a manner that a first input of the XOR gate is connected to an output of a storage element (FF2) located in the code-producing series, a second input of the XOR gate is connected to an output of a further storage element (FF5) located in the code-producing series and an output of the XOR gate is connected to the storage element (FF3) following the storage element connected to the first input of the XOR gate in the code-producing series.

55. The method according to claim 54, wherein an AND gate (ANDp1) is connected in a line connecting the second input of the at least one XOR gate (XORp1) and the output of the further storage element (FF5) located in the code-producing series (21, 24) in such a manner that an output of the AND gate (ANDp1) is connected to the second input of the XOR gate (XORp1), a first input of the AND gate (ANDp1) is connected to the output of the further storage element (FF5) located in the code-producing series and a second input of the AND gate (ANDp1) is connected to an output of a code-programming storage element (FFp2), wherein a storage element of a further feedback shift register (22, 25) is used as code-programming storage element, and in that preferably the output of a storage element (FF9) located in the code-producing series (21, 24) is connected to an input of an inverter (INV) and the output of the inverter (INV) is connected to the input of a different storage element (FF1) arranged in the code-producing series (21, 24).

56. The method according to claim 40, wherein the dataset (1) is a database.

57. The method according to claim 40, wherein the data transmitted between the processing unit (4) and a user computer (8) are transmitted in an encrypted manner.

58. The method according to claim 57, wherein the encrypted transmission of the data between the processing unit (4) and the user computer (8) takes place using one en- and decryption unit (11) assigned to the user computer (8) and one en- and decryption unit (11) assigned to the dataset (1), using which the data are en- or decrypted by means of stream cipher.

59. The method according to claim 40, wherein any transmission of data from and to the processing unit (4) takes place via at least one en- and decryption unit (6, 7, 11), using which the data are en- or decrypted by means of stream cipher.

60. A device for writing and reading data into and out of an indexed dataset (1), which comprises a data structure (2) and an associated index structure (3), comprising a processing unit (4), in which the data to be written can be received in plain text and which has write access to the data structure (2), in order to write the data to the data structure (2), and which interacts with the index structure (3), in order to update index data in the index structure (3), and which has access to the index data, in order to detect data to be read out or the memory location thereof, and which has read access to the data structure (2), in order to read out the data to be read out from the data structure (2) and to make the same available in plain text, wherein the processing unit (4) is connected to the data structure (2) and to the index structure (3) via at least one en- and decryption unit (6, 7), using which the data can be en- or decrypted by means of a stream cipher, so that the write/read access of the processing unit (4) to the index structure (3) and to the data structure (2) takes place via the at least one en- and decryption unit (6, 7).

61. The device according to claim 60, wherein the en- and decryption unit (6, 7) has at least one feedback shift register (13;

21, 22, 23;

24, 25;

24, 25, 26) for generating a key stream for the stream cipher, to which a defined sequence of bits is fed in each case for the initialisation thereof.

62. The device according to claim 61, wherein means for generating and/or storing at least one first sequence of bits (14) and a second sequence of bits (15) are provided, which interact with the shift register(s) (13;

21, 22, 23;

24, 25;

24, 25, 26) in such a manner that at least the first sequence of bits (14) and the second sequence of bits (15) are used for initialising the feedback shift register(s) (13;

21, 22, 23;

24, 25;

24, 25, 26).

63. The device according to claim 62, wherein the first sequence of bits (14) is fed to at least one first feedback shift register (21;

24) for the initialisation thereof and the second sequence of bits (15) is fed to at least one second feedback shift register (22;

25) for the initialisation thereof.

64. The device according to claim 62, wherein the means for generating and/or storing the first sequence of bits (14) are configured to generate the first sequence of bits (14) from an index number assigned to a data record to be encrypted or decrypted.

65. The device according to claim 62, wherein the means for generating and/or storing the second sequence of bits (15) are configured to generate the second sequence of bits (15) from a unique identifier of the database (1).

66. The device according to claim 62, wherein means of generating and/or storing at least one third sequence of bits (16) are provided, which interact with the shift register(s) (13;

21, 22, 23;

24, 25;

24, 25, 26) in such a manner that the third sequence of bits (16) is also used for initialisation of the feedback shift register(s) (13;

21, 22, 23;

24, 25;

24, 25, 26).

67. The device according to claim 66, wherein the third sequence of bits (16) is generated from a unique identifier of the respective user.

68. The device according to claim 66, wherein the third sequence of bits (16) is fed to a third feedback shift register (23, 26) for initialisation.

69. The device according to claim 62, wherein the feedback shift registers (13;

21,22,23;

24,25;

24,25,26) are simultaneously filled with the respective sequence of bits.

70. The device according to claim 61, wherein at least one XOR gate (XORp1, XORp2, XORp3, XORp4, XORpp1, XORppp1) is used for the feedback of the shift register(s) (13;

21, 22, 23;

24, 25;

24, 25, 26).

71. The device according to claim 70, wherein the feedback shift registers (13;

21, 22, 23;

24, 25;

24, 25, 26) are connected to one another in such a manner that the at least one XOR gate (XORp1, XORp2, XORp3, XORp4, XORpp1) of one shift register is switched on or off depending on the state of another shift register.

72. The device according to claim 70, wherein the at least one feedback shift register (13;

21, 22, 23;

24, 25;

24, 25, 26) has a plurality of storage elements (FF1, FF2, . . . ;

FFp1, FFp2, . . . ;

FFpp1, FFpp2, . . . ) connected to form a code-producing series, wherein an output of the last storage element is connected to an input of the first storage element in the series to form a circuit, wherein the feedback takes place with the aid of the at least one XOR gate (XORp1, XORp2, XORp3, XORp4, XORpp1, XORppp1) in such a manner that a first input of the XOR gate is connected to an output of a storage element (FF2) located in the code-producing series, a second input of the XOR gate is connected to an output of a further storage element (FF5) located in the code-producing series and an output of the XOR gate is connected to an input of the storage element (FF3) following the storage element in the code producing series connected to the first input of the XOR gate.

73. The device according to claim 72, wherein an AND gate (ANDp1) is connected in such a manner in a line connecting the second output of the at least one XOR gate (XORp1) and an output of the further storage element (FF5) located in the code-producing series (21;

24) that an output of the AND gate (ANDp1) is connected to the second input of the XOR gate (XORp1), a first input of the AND gate (ANDp1) is connected to an output of the further storage element (FF5) located in the code-producing series (21;

24) and a second input of the AND gate (ANDp1) is connected to an output of a code-programming storage element (FFp2) and in that preferably an output of a storage element (FF9) located in the code-producing series (21, 24) is connected to an input of an inverter (INV) and an output of the inverter (INV) is connected to an input of a different storage element (FF1) arranged in the code-producing series (21;

24), wherein a storage element of a further feedback shift register (22;

25) is used as code programming storage element.

74. The device according to claim 72, wherein a plurality of XOR gates (XORp1,p2,p3,p4) is provided, a first input of which is in each case fed by an output of a storage element (FF1,2,3,4) located in the code-producing series (21;

24) and a second input of which is in each case fed by an output of a further storage element (FF8,15,20,23) located in the code-producing series (21;

24), which is a number of storage elements remote from the storage element (FF1,2,3,4) connected to the first input in the flow direction of the series (21;

24), which number in each case corresponds to a different prime number, which is greater than 1 and not a fraction of the total number of storage elements (FF1,2, . . . n) connected in series (21;

24).

75. The device according to claim 73, wherein a plurality of code-programming storage elements (FFp1,p2,p3,p4, . . . pn) assigned to an AND gate (ANDp1,p2,p3,p4) and an XOR gate (XORp1,p2,p3,p4) in each case is provided and connected in a closed series (22;

25) to form a circuit and at least one XOR gate (XORpp1) is arranged, a first input of which is connected to an output of a storage element (FFp6) located in the code-programming series (22;

25), a second input of which is connected to an output of a further storage element (FFp5) located in the code-programming series (22;

25) and an output of which is connected to an input of the storage element (FFp1) following the storage element (FFp6) connected to the first input of the XOR gate (XORpp1) in the code-programming series (22;

25).

76. The device according to claim 75, wherein the AND gate (ANDpp1) is connected in such a manner in the line connecting the second input of the at least one XOR gate (XORpp1) and the output of the further storage element (FFp3) located in the code-programming series (22;

25) that the output of the AND gate (ANDpp1) is connected to the second input of the XOR gate (XORpp1), a first input of the AND gate (ANDpp1) is connected to the output of the further storage element (FFp3) located in the code-programming series (22;

25) and a second input of the AND gate (ANDpp1) is connected to the output of a storage element (FFpp5) used for the programming of the code-programming series (22;

25).

77. The device according to claim 76, wherein a plurality of storage elements (FFpp1,pp2,pp3,pp4, . . . ppn) used for programming the code-programming series (22;

25) and assigned to the AND gate (ANDpp1) and the XOR gate (XORpp1) in each case is provided and connected in a closed series (23;

26) to form a circuit and at least one XOR gate (XORppp1) is arranged, a first input of which is connected to an output of a storage element (FFpp1) located in the series (23;

26), a second input of which is connected to an output of a further storage element (FFpp3) located in the series (23;

26) and an output of which is connected to an input of the storage element (FFpp2) following the storage element (FFpp1) connected to the first input of the XOR gate (XORppp1) in the series (23;

26).

80. A dataset, comprising a data-containing data structure (2) and an associated index structure (3) containing index data, wherein the data in the data structure (2) and the index data in the index structure (3) are stored in an encrypted manner by means of stream cipher.

81. A dataset according to claim 80, wherein the dataset is a database (1).