Encrypted Database Query Acceleration via Partial Decryption Offload
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Centralized databases face security vulnerabilities due to the risk of compromising large amounts of data, and straightforward encryption compromises data processing efficiency.
Innovation Solution
A system that generates partially decrypted query results using decryption keys, offloads further decryption to a processor, and manages encryption to balance security and performance by distributing query operations between the database and an offload processor.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If straightforward database encryption is implemented, then security is improved, but data processing efficiency deteriorates
Solution Approach 1:
The patent segments the decryption process into two distinct phases: partial decryption performed by the database system on encrypted data, and full decryption performed by an offload processor on the partially decrypted results. This segmentation allows the database to maintain security by keeping data encrypted during storage and initial processing, while enabling efficient full decryption for query operations through the offload processor, thus resolving the contradiction between security and processing efficiency.
Solution Approach 2:
The patent introduces an offload processor as an intermediary component between the encrypted database and the final decrypted results. This intermediary handles the computationally intensive full decryption operations, allowing the database system to maintain its security posture while delegating the performance-critical decryption tasks to a specialized component, thereby balancing security requirements with processing efficiency.
2Productivity
If data is centralized in a database, then data processing operations are improved, but security vulnerability risk increases
Solution Approach 1:
The patent segments the data lifecycle into distinct encrypted and decrypted phases, with the database system handling only encrypted data for storage and initial processing operations. This segmentation allows centralized data processing to proceed efficiently on encrypted data while minimizing the exposure window for sensitive information, as full decryption occurs only when necessary through the offload processor, thus reducing security vulnerability risk.
Solution Approach 2:
The patent applies preliminary encryption to data before it is stored in the database, and performs preliminary partial decryption on encrypted data before full decryption. This preliminary action ensures that data remains protected throughout the majority of its lifecycle in the centralized database, reducing the time window for potential security breaches while maintaining efficient processing capabilities on the encrypted data structure.
Data Source
AI summary
Accelerated encrypted database operations may include a database receiving a modified database query and one or more decryption keys that correspond to the modified database query. Based, at least in part, on the modified database query and the one or more decryption keys, the database may generate partially decrypted query results. The database may submit the partially decrypted query results to an encryption manager for further decryption by an offload processor to generate further decrypted query results.