Encrypted Search Index for Poly-Logarithmic Range Queries

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current encrypted database systems face inefficiencies in handling range queries, often leaking additional information or significantly slowing down search processes when outsourcing data to cloud service providers.

Innovation Solution

Implementing a poly-logarithmic range query method that uses an encrypted search index, allowing the server to compare range tokens from previous queries to speed up subsequent searches, while maintaining data privacy by not revealing information about unqueried ciphertexts.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If current encrypted database schemes are used for range queries, then data privacy is maintained, but search time significantly increases

Engineering Contradiction:
Improvedata privacyVSAvoidsearch time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-processing encrypted data into a structured search index with sorted encrypted values and corresponding position information before query execution. This pre-organized structure enables efficient range queries without decryption, resolving the contradiction by preparing the data in advance for fast encrypted searching while maintaining privacy.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces the mechanical decryption-and-search approach with an encrypted-domain search mechanism. Instead of decrypting data to perform searches, the system maintains encrypted data in a sorted structure and performs comparisons directly on ciphertexts using cryptographic comparison functions, substituting the traditional mechanical process with a cryptographic one that preserves privacy while enabling efficiency.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If current encrypted database schemes are used for range queries, then data privacy is maintained, but additional information leakage occurs

Engineering Contradiction:
Improvedata privacyVSAvoidinformation leakage
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent extracts only the necessary minimum information for query execution by performing all search operations directly on encrypted data without extracting plaintext values. The search index stores encrypted values with position mappings, allowing range queries to be executed on ciphertexts alone, extracting no additional plaintext information and thus preventing information leakage while maintaining functionality.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces encrypted position mappings as an intermediary between the encrypted data values and the query results. This intermediary layer allows the system to return correct query results without exposing plaintext relationships or additional information, as the position mappings operate entirely in the encrypted domain and reveal no semantic information about the underlying data.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of manufacture

If a simple encrypted search approach is used, then implementation is straightforward, but search efficiency decreases

Engineering Contradiction:
Improveimplementation simplicityVSAvoidsearch efficiency
Core Design Contradiction:
Ease of manufactureVSProductivity

Solution Approach 1:

The patent segments the encrypted data into a structured search index consisting of sorted encrypted values and corresponding position information. This segmentation organizes the data in a way that enables efficient binary search and range query operations on encrypted data, improving search efficiency from linear to logarithmic time complexity while maintaining implementation feasibility through modular index construction.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11341128B2Poly-logarithmic range queries on encrypted data
Publication Date: 2022.05.24 SAP SE
  • US11341128B2 patent drawing
  • US11341128B2 patent drawing
  • US11341128B2 patent drawing

AI summary

Methods, systems, and computer-readable storage media for range queries over encrypted data include actions of receiving a range query token, determining one or more of whether a tree list of an encrypted search index is empty and a range of the token intersects with a range accounted of a tree in the tree list, the encrypted search index including the tree list and a point list, receiving encrypted query results based on one of a search tree, if the tree list is not empty and a range of the token is at least a sub-range of a range accounted for in the tree list, and the point list, if the tree list is empty or the range of the token is not at least a sub-range of a range accounted for in the tree list, and updating the encrypted search index based on the token.