Encrypted Data Querying Without Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data encryption methods are inadequate for protecting data in use, as they require decryption for processing and querying, making them vulnerable to hackers and breaches, especially in heterogeneous environments and across various applications.
Innovation Solution
The implementation of a smart encryption system that encrypts data once and allows querying and processing without decryption, using a dedicated encrypted data repository, compatible with all applications and APIs, and supporting multi-layer security with automated key rotation and anomaly detection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted using traditional methods, then data security at rest is improved, but data processing and querying require decryption which creates security vulnerabilities
Solution Approach 1:
The patent changes the state of encrypted data from requiring complete decryption to allowing processing in encrypted form by modifying the encryption scheme to support ordered relationships and comparisons on ciphertext, enabling secure query processing without decryption
Solution Approach 2:
The patent introduces an intermediary layer (the smart encryptor) that mediates between the application and the encrypted data, translating application queries into encrypted query operations that can be executed on ciphertext without exposing plaintext
2Ease of operation
If data is decrypted for processing, then query functionality is enabled, but data protection during use is compromised
Solution Approach 1:
The patent changes the operational parameters of encrypted data by designing encryption schemes that preserve order and comparison relationships, allowing queries to be executed directly on encrypted data without decryption while maintaining full query functionality
3Reliability
If encryption is applied to each access, then data security is maintained, but system complexity and performance degrade
Solution Approach 1:
The patent applies preliminary action by encrypting data once using a smart encryptor that establishes encrypted indexes and data structures, eliminating the need for repeated encryption/decryption cycles during subsequent access operations
Solution Approach 2:
The patent creates a universal encrypted data structure that serves multiple functions - storing encrypted data, maintaining searchability, and supporting various query operations - eliminating the need for separate encryption and query processing systems
4Reliability
If data is encrypted, then compliance with security standards is achieved, but application compatibility and querying capability are reduced
Solution Approach 1:
The smart encryptor acts as a universal intermediary layer between applications and encrypted data, translating application queries into encrypted operations without requiring application-specific modifications, thus maintaining full application compatibility
Solution Approach 2:
The patent creates a universal encrypted data structure that maintains all standard data operations (querying, sorting, filtering) while keeping data encrypted, providing both security compliance and full application versatility
Data Source
AI summary
A method for performing data encryption and application-agnostic querying of encrypted data includes identifying, via a processor, selected data for encryption. Encryption is applied to the selected data, to produce encrypted data. A query is received at the processor, the query originating from a software application. The query is translated into a modified query compatible with the encrypted data. The processor causes execution of the modified query, to produce query results. The query results include a subset of the encrypted data. The query results are sent to the software application without decrypting the subset of the encrypted data.