Anonymized Database Querying via Deterministic Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing database querying methods require decryption of encrypted data, leading to significant delays and performance issues, as they cannot match the speed and analytical capabilities of querying unencrypted data.
Innovation Solution
A system and method that allows querying of anonymized databases without decryption, using deterministic encryption and mathematical transformations to maintain query performance and security, by anonymizing data at the character level and using indexes for efficient querying.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted to secure it from improper access, then security is improved, but query performance deteriorates due to decryption requirements
Solution Approach 1:
The patent applies preliminary action by pre-processing data during insertion into the database, transforming it into an anonymized form that preserves queryability. The anonymization function is applied when data is inserted, converting sensitive data into anonymized data that can be queried without decryption, thus preparing the data in advance to avoid performance issues during queries.
Solution Approach 2:
The patent changes the parameter of data representation by transforming sensitive data into anonymized data through mathematical functions. The system modifies the data format from plaintext to anonymized form using deterministic encryption and character-level transformations, allowing the data to maintain security while enabling efficient querying without traditional decryption operations.
2Measurement precision
If data is decrypted for querying operations, then query accuracy is improved, but processing time increases significantly
Solution Approach 1:
The system performs preliminary anonymization when data is inserted into the database, so that during queries, the anonymized data is already in the correct form for analysis. This eliminates the need for time-consuming decryption operations while maintaining the ability to perform accurate analytical operations on the data.
Solution Approach 2:
The patent introduces anonymized data as an intermediary form between plaintext and encrypted data. This intermediate representation allows analytical operations to be performed directly on the database without requiring decryption, while still preserving the ability to obtain accurate results through the anonymization function that maintains data relationships.
3Reliability
If traditional encryption methods are used, then data confidentiality is maintained, but analytical capabilities over encrypted data are limited
Solution Approach 1:
The patent transforms the data parameter from plaintext to anonymized form using deterministic encryption and character-level anonymization functions. This parameter change enables the data to maintain confidentiality while simultaneously allowing analytical operations such as grouping, filtering, and aggregation to be performed directly on the anonymized data without decryption.
Solution Approach 2:
The anonymization function serves multiple purposes: it maintains data confidentiality like encryption, but also enables analytical operations that would otherwise require decryption. The same anonymized data structure supports both security requirements and diverse analytical capabilities including SQL queries, aggregations, and data analysis operations.
4Reliability
If data is anonymized at character level, then security against re-identification attacks is improved, but data structure complexity increases
Solution Approach 1:
The patent applies segmentation by anonymizing data at the character level rather than treating entire fields as single units. Each character in sensitive fields is transformed independently through the anonymization function, breaking down the data structure into smaller segments that are harder to re-identify while maintaining the overall data format and relationships.
Data Source
AI summary
The present invention relates generally to a system and method of querying an anonymized database. More particularly, the invention provides a method and system for querying an anonymized database without the need to decrypt queried data while it's processed. Even more specifically, the invention provides a method and system of anonymizing a database such that it may be queried efficiently in near real time while still retaining the ability to not decrypt requested data while it's being processed.