Encrypted Database Search via Element Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing database security measures compromise security when encrypted fields must be stored in plain text to facilitate searching and retrieval, allowing unauthorized access to valuable records.
Innovation Solution
A method of securely storing and searching data by encrypting each element of data and search terms, combining them, and applying additional normalization and encryption steps to maintain security while enabling searches on encrypted columns without decrypting large amounts of data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If encrypted fields are stored in plain text to facilitate searching and retrieval, then searching and retrieval efficiency is improved, but database security is worsened
Solution Approach 1:
The patent segments encrypted data into multiple blocks and applies different encryption keys to different segments. This allows partial decryption of only necessary segments for searching, rather than decrypting entire records, thus maintaining security while enabling efficient search operations on specific fields.
Solution Approach 2:
The patent applies different encryption strategies to different parts of the database - critical fields use strong encryption that prevents decryption, while search fields use encryption that allows efficient searching. This local differentiation optimizes both security and searchability for each specific requirement.
2Reliability
If all columns in the database are encrypted, then database security is improved, but searching and retrieval capability is worsened
Solution Approach 1:
The patent performs preliminary encryption of data before storage, organizing it into searchable blocks with embedded encryption keys. This preliminary structuring enables the database to maintain full encryption while supporting efficient search operations without requiring decryption of entire records during retrieval.
Solution Approach 2:
The patent introduces encryption keys as intermediaries that bridge encrypted data and search functionality. These keys are embedded within encrypted blocks, allowing the system to maintain encryption while providing controlled access paths for searching without exposing plaintext data.
3Ease of operation
If only some fields are left in plain text for searching, then searching capability is improved, but the security against focused attacks on high-value records is worsened
Solution Approach 1:
The patent segments data into multiple encrypted blocks, preventing attackers from easily identifying high-value records by examining plain text fields. Each segment is encrypted with different keys, making it difficult for attackers to determine which segments contain valuable information without triggering security alerts.
Solution Approach 2:
The patent creates asymmetric encryption properties where different fields have different searchability and security characteristics. Critical fields maintain strong encryption protection, while other fields enable searching, creating an asymmetric structure that balances security and functionality while preventing easy identification of high-value targets.
Data Source
AI summary
Method and system for securely storing data in a database comprising: receiving data to be stored. Dividing the data into a plurality of elements. Encrypting each element of the plurality of elements with an encryption function. Combining the encrypted elements to form a data attribute. Storing the data attribute in the database.Method and system for searching a database having encrypted data attributes comprising: receiving a search term. Encrypting the search term with an encryption function. Searching a database for records having data attributes matching the encrypted search term.