Encrypted Multi-Map Architecture for Concurrent Secure Queries
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing end-to-end encryption technologies face challenges in securing data management, particularly in multi-client and multi-writer settings, with vulnerabilities to data leakage and inefficiencies in concurrent operations, server crashes, and storage overhead.
Innovation Solution
A system employing encrypted multi-map data structures and encryption schemes that support snapshot security, multiple client support, efficient concurrent operations, and resilience to client failures, using lightweight clients and scalable architecture, with features like overwrite protection and stateless designs to enhance security and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If end-to-end encryption is implemented in database systems, then data security is improved, but query execution efficiency deteriorates
Solution Approach 1:
The patent segments the encrypted database into multiple encrypted multi-map data structures, each handling specific operations (reads, writes, deletes). This segmentation allows optimized encryption schemes to be applied to each structure type, maintaining security while improving query execution efficiency through specialized handling of different operations.
Solution Approach 2:
The patent introduces encrypted multi-map data structures as intermediaries between the encryption layer and the database operations. These structures enable efficient execution of encrypted queries by providing specialized data organization and access patterns that balance security requirements with operational performance.
2Adaptability or versatility
If encryption schemes support multiple clients and concurrent operations, then system versatility is improved, but device complexity deteriorates
Solution Approach 1:
The patent divides the system into multiple encrypted multi-map structures, with each structure dedicated to specific operations or client groups. This segmentation enables independent optimization and management of each component, reducing overall system complexity while supporting multiple clients and concurrent operations.
Solution Approach 2:
The encrypted multi-map data structures are designed to serve multiple functions: they support reads, writes, deletes, and concurrent operations from multiple clients. This multi-functionality reduces the need for separate specialized structures, simplifying the overall system architecture while maintaining versatility.
3Reliability
If overwrite protection is implemented in encrypted data structures, then data integrity is improved, but storage overhead increases
Solution Approach 1:
The patent implements overwrite protection by maintaining encrypted metadata that records previous values and version information before writes occur. This preliminary action prevents accidental overwrites and enables data recovery, ensuring integrity while using metadata structures that minimize storage overhead through efficient encoding.
Data Source
AI summary
According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.