Encoder, decoder and methods employing partial data encryption

Patent metadata

Field	Value
Publication number	US-10320557-B2
Application number	US-201515512265-A
Country	US
Kind code	B2
Filing date	Sep 21, 2015
Priority date	Sep 19, 2014
Publication date	Jun 11, 2019
Grant date	Jun 11, 2019

Abstract

A method of encoding and encrypting input data (D 1 ) to generate corresponding encoded and encrypted data (E 2 ) is provided. The input data (D 1 ) is encoded to generate intermediate encoded data streams. The intermediate encoded data streams include at least one critical data stream that is critical and essential for subsequent decoding of one or more remaining data streams of the intermediate encoded data streams. The at least one critical data stream is encrypted using one or more encryption algorithms to generate at least one intermediate encrypted data stream. Subsequently, unencrypted portions of the intermediate encoded data streams are merged together with the at least one intermediate encrypted data stream to generate the encoded and encrypted data (E 2 ).

First claim

We claim:

1. An apparatus ( 110 ) for encoding and encrypting an input data (D 1 ) to generate a corresponding encoded and encrypted data (E 2 ), wherein the apparatus ( 110 ) comprises a hardware processor configured to execute non-transitory machine readable program instructions, and wherein the hardware processor is configured to:
(a) divide and/or combine the input data (D 1 ) into a plurality of data blocks and/or data packets, and encode the input data (D 1 ) using a plurality of encoding methods to generate a plurality of intermediate encoded data streams, wherein the plurality of intermediate encoded data streams comprises at least two encoded critical data streams and one or more remaining encoded data streams, wherein at least one of the at least two encoded critical data streams comprise information indicating a plurality of encoding methods used to encode at least a portion of the input data (D 1 ) to the plurality of intermediate encoded data streams, and wherein the at least two encoded critical data streams represent only a part of the plurality of intermediate encoded data streams, and wherein the at least two encoded critical data streams are required to decode the one or more remaining encoded data streams, and wherein the at least two encoded critical data streams comprise information indicative of at least one of: a plurality of split and/or combine operations that are employed to divide and/or combine the input data (D 1 ) into the plurality of data blocks and/or data packets, one or more encoding methods that are employed for encoding information of the plurality of data blocks and/or data packets, one or more entropy-encoding methods that are employed for entropy-encoding the plurality of data blocks and/or data packets into a plurality of entropy-encoded data bocks and/or data packets and/or a length of the plurality of entropy-encoded data blocks and/or data packets in the entropy-encoded data streams, and/or a length of one or more of the data blocks and/or data packets in the plurality of data blocks and/or data packets prior to encoding being applied;
(b) encrypt the at least two encoded critical data streams using one or more encryption methods to generate at least two intermediate encrypted data streams; and
(c) merge unencrypted portions of the plurality of intermediate encoded data streams together with the at least two intermediate encrypted data streams to generate the encoded and encrypted data (E 2 ).

2. An apparatus ( 110 ) as claimed in claim 1 , wherein the input data (D 1 ) is divided into a plurality of data blocks and/or data packets, and wherein the hardware processor is configured to perform a statistical analysis and/or an iterative analysis of the plurality of data blocks and/or data packets to determine a plurality of parameters that are indicative of statistical variation within their respective data blocks and/or data packets, and wherein the data processing arrangement is operable to employ the plurality of parameters to select the one or more encoding methods to be used to encode the information of the plurality of data blocks and/or data packets to generate the plurality of intermediate encoded data streams.

3. An apparatus ( 110 ) as claimed in claim 1 , wherein the input data (D 1 ) is at least one of: one-dimensional data, multi-dimensional data, text data, binary data, sensor data, audio data, image data, video data, encoded data.

4. An apparatus ( 110 ) as claimed in claim 1 , wherein the hardware processor is configured to compress at least one of the at least two encoded critical data streams into at least one compressed critical data stream prior to encrypting the at least one of the at least two encoded critical data streams.

5. An apparatus ( 110 ) as claimed in claim 4 , wherein the hardware processor is configured to compute a first byte of the at least one compressed data stream, wherein the first byte describes an entropy encoding method that is employed for compressing the at least one compressed data stream.

6. An apparatus ( 110 ) as claimed in claim 1 , wherein the hardware processor is configured to define encryption by using at least one of: a new byte that is written at a beginning of an encrypted data stream, a most significant bit in an entropy encoding method byte and/or word, an order in which unencrypted and encrypted data streams are included in the encoded and encrypted data (E 2 ), a flag bit.

7. A method of encoding and encrypting an input data (D 1 ) to generate corresponding encoded and encrypted data (E 2 ), the method comprising:
(a) encoding the input data (D 1 ) using a plurality of coding methods to generate a plurality of intermediate encoded data streams, wherein the plurality of intermediate encoded data streams comprises at least two encoded critical data streams and one or more remaining encoded data streams, and wherein at least one of the at least two encoded critical data streams comprise information indicating a plurality of encoding methods used to encode at least a portion of the input data (D 1 ) to the plurality of the intermediate encoded data streams, and wherein the at least two encoded critical data streams represent only a part of the plurality of intermediate encoded data streams, and wherein the at least two encoded critical data streams are required to decode the one or more remaining encoded data streams, and wherein the at least two encoded critical data streams comprise information indicative of at least one of: a plurality of split and/or combine operations that are employed to divide and/or combine the input data (D 1 ) into the plurality of data blocks and/or data packets, one or more encoding methods that are employed for encoding information of the plurality of data blocks and/or data packets, one or more entropy-encoding methods that are employed for entropy-encoding the plurality of data blocks and/or data packets into a plurality of entropy-encoded data bocks and/or data packets and/or a length of the plurality of entropy-encoded data blocks and/or data packets in the entropy-encoded data streams, and/or a length of one or more of the data blocks and/or data packets in the plurality of data blocks and/or data packets prior to encoding being applied;
(b) encrypting the at least two encoded critical data streams using one or more encryption algorithms to generate at least two intermediate encrypted data streams; and
(c) merging unencrypted portions of the plurality of intermediate encoded data streams together with the at least two intermediate encrypted data streams to generate the encoded and encrypted data (E 2 ).

8. A method as claimed in claim 7 , wherein the input data (D 1 ) is divided into a plurality of data blocks and/or data packets, and wherein the method comprises:
(d) performing a statistical analysis and/or an iterative analysis of the plurality of data blocks and/or data packets to determine a plurality of parameters that are indicative of statistical variation within their respective data blocks and/or data packets; and
(e) employing the plurality of parameters to select the one or more encoding methods to be used to encode the information of the plurality of data blocks and/or data packets to generate the plurality of intermediate encoded data streams.

9. A method as claimed in claim 7 , wherein the input data (D 1 ) is at least one of: one-dimensional data, multi-dimensional data, text data, binary data, sensor data, audio data, image data, video data, encoded data.

10. A method as claimed in claim 7 , wherein the method comprises compressing the at least one of the at least two encoded critical data streams into at least one compressed data stream prior to encrypting the at least one of the at l

Assignees

• Gurulogic Microsystems Oy

Inventors

• Kärkkäinen Tuomas
• Kalevo Ossi

Classifications

• H04L9/0637 Primary

  Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM] · CPC title

• H04L9/065 Primary

  Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3 · CPC title

• H04N21/44055

  by partially decrypting, e.g. decrypting a video stream that has been partially encrypted · CPC title

• H04N21/23476

  by partially encrypting, e.g. encrypting the ending portion of a movie · CPC title

• H04L9/12

  Transmitting and receiving encryption devices synchronised or initially set up in a particular manner · CPC title