Encrypted Query Retrieval via Server-Side Key Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing and information retrieval systems face challenges in maintaining client and server privacy, particularly when querying content providers, as they often require revealing query details or downloading entire encrypted databases.
Innovation Solution
The proposed method involves a server receiving client-encrypted queries, identifying server-encrypted decryption keys, transmitting these keys to the client, and then receiving client-server-encrypted decryption keys back. The server generates a decryption key map to filter queries and produce query results without revealing sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If the client queries the content provider directly, then the client can retrieve information, but the client must reveal query details to the content provider
Solution Approach 1:
A server acts as an intermediary between the client and content provider. The server receives encrypted queries from the client, generates decryption keys, and facilitates information retrieval without either party revealing sensitive information to the other. The server mediates the interaction by handling key generation and matching operations.
Solution Approach 2:
The system segments the information retrieval process into distinct cryptographic operations: client-side query encryption, server-side key generation and matching, and result delivery. This segmentation allows each party to perform specific operations without exposing their private data.
2Loss of information
If the content provider stores encrypted data, then server privacy is protected, but the client cannot retrieve specific information without downloading the entire database
Solution Approach 1:
The server performs preliminary key generation and stores encrypted decryption keys in advance. When the client needs information, the server can efficiently match and retrieve specific keys without requiring the client to download the entire database. This preliminary preparation enables selective information retrieval.
Solution Approach 2:
The system extracts only the necessary decryption keys from the encrypted database based on matched queries, rather than requiring transmission of the entire database. This extraction approach minimizes data transmission while maintaining server data privacy.
3Productivity
If the server processes unencrypted queries, then information retrieval is efficient, but query details are exposed to the server
Solution Approach 1:
The system changes the parameter of query encryption from unencrypted to encrypted form. The server processes encrypted queries by performing cryptographic operations (key generation and matching) rather than traditional text-based query processing, maintaining efficiency while preserving privacy.
Data Source
AI summary
Methods, systems, and apparatus, including computer programs encoded on a computer storage medium for retrieving information from a server. Methods can include a server receiving a set of client-encrypted queries. The server identifies a set of server-encrypted decryption keys and transmits the set to the client device. The server receives a set of client-server-encrypted decryption keys that includes the set of server-encrypted decryption keys encrypted by the client device. The server also receives a set of client-encrypted/client-derived decryption keys that were derived by the client device. The server generates matching a map that specifies matches between the set of client-server-encrypted decryption keys and the set of client-encrypted/client-derived decryption keys. The server filters the set of client-encrypted queries using the map to create a set of filtered client-encrypted queries and generates a set of query results.