Encrypted Channels for Distributed Database Query Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Distributed database systems face vulnerabilities to unauthorized access as data transmitted across network links is exposed, making it susceptible to unauthorized parties, especially when compromised by an unauthorized node accessing communications between authorized nodes.
Innovation Solution
Establishing a first encrypted channel using a first key for query metadata and a second key for query data, ensuring that the query data is protected by encryption, thereby preventing unauthorized access and maintaining security across network links.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is transmitted across network links in a distributed database system, then communication between nodes is enabled, but the data becomes exposed to unauthorized parties
Solution Approach 1:
The patent introduces encryption as an intermediary mechanism that mediates between the need for open communication and the need for security. Encryption keys act as intermediaries that enable authorized nodes to communicate while preventing unauthorized access. The first encryption key protects metadata and the second encryption key protects query data, creating a layered intermediary protection system.
Solution Approach 2:
The patent implements nested encryption where multiple levels of encryption are applied to data. The first encryption key encrypts metadata and the second encryption key, creating a nested structure where the second key is itself protected by the first key. This nested approach allows sequential decryption and provides multiple layers of security.
2Reliability
If encryption is applied to protect query data, then security is improved, but the complexity of the communication protocol increases
Solution Approach 1:
The patent segments the encryption protocol into distinct components: a first encryption key for metadata protection and a second encryption key for query data protection. This segmentation allows each encryption layer to be managed independently, reducing the complexity of implementing and managing a single comprehensive encryption system.
Solution Approach 2:
The patent establishes encryption keys and encrypted channels before actual data communication occurs. The first encryption key is distributed and the first encrypted channel is established prior to metadata transmission. Similarly, the second encryption key is distributed and the second encrypted channel is established before query data transmission. This preliminary setup simplifies the actual communication process.
Data Source
AI summary
A non-transitory machine-readable storage medium stores instructions that upon execution cause a processor to, in response to a receipt of a query, communicate, via a first encrypted channel using a first key, first encrypted data between a plurality of nodes of a distributed database system, the first encrypted data comprising query metadata and a second key; communicate, via a second encrypted channel, second encrypted data between the plurality of nodes of the distributed database system, the second encrypted channel using the second key included in the first encrypted data, the second encrypted data comprising query data; and generate, by the plurality of nodes of the distributed database system, results for the query based on the query data in the second encrypted data.