Encrypted Search Database Index Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encrypted search database systems face risks of information leakage when adding, deleting, or updating documents, as they lack efficient methods to manage these operations without exposing sensitive information.
Innovation Solution
An encrypted search database device and method that generates and stores encrypted search result and initial point arrays using a given encryption key, allowing for secure addition, deletion, and updating of documents by encrypting linear lists and storing final point information for each keyword, thereby preventing information leakage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If an index file is used to speed up search processing, then search efficiency is improved, but information leakage risk increases when adding, deleting, or updating documents
Solution Approach 1:
The patent segments the index file into multiple encrypted index files, each protected by a different encryption key. This segmentation allows the system to maintain search efficiency while reducing information leakage risk, as compromising one encrypted index file does not expose the entire index structure. The segmentation principle directly addresses the contradiction by dividing the vulnerable index file into protected segments.
Solution Approach 2:
The patent introduces encrypted index files as an intermediary layer between the plain text index file and the search processing system. These encrypted index files act as mediators that preserve search functionality while protecting underlying information. The intermediary encrypted files enable search efficiency to be maintained without directly exposing sensitive document metadata during add/delete/update operations.
2Reliability
If document operations (add, delete, update) are performed on encrypted data, then information security is improved, but processing complexity increases
Solution Approach 1:
The patent applies preliminary encryption to the index file before any document operations are performed. By pre-encrypting the index structure and organizing it into encrypted index files with associated encryption keys, the system establishes a secure foundation that simplifies subsequent add/delete/update operations. The preliminary encryption action prevents information leakage during operations without requiring complex real-time encryption/decryption processing.
Solution Approach 2:
The patent changes the parameter state of the index file from plain text to encrypted form, and organizes it into a structured format with multiple encrypted index files and corresponding keys. This parameter change enables secure document operations by transforming the data structure into a state that inherently protects information while maintaining可操作性 for add/delete/update operations through the use of encryption keys.
3Measurement precision
If the entire index file is decrypted for search processing, then search accuracy is improved, but information leakage risk increases
Solution Approach 1:
The patent implements partial decryption by only decrypting specific portions of the index file that are relevant to the current search query, rather than decrypting the entire index file. This partial action approach maintains search accuracy for the queried keywords while minimizing information exposure. The system decrypts only the necessary encrypted index file segments temporarily, performs search operations, and then discards the decrypted data, thereby achieving accurate search results without comprehensive information leakage.
Data Source
AI summary
The encrypted search result adding module of the encrypted search database device includes: a search result generating unit which generates a linear list as a list of search results for newly registered document data; an initial point information generating unit which generates initial point information as address of first data corresponding to a keyword; an initial point information encrypting unit which encrypts and adds/stores generated initial point information with an encryption key; and an encrypted linear list adding unit which generates and adds/stores an encrypted linear list by encrypting the linear list with the encryption key, and stores each keyword and final point information as the address of last data in the encrypted linear list for the keyword as adding information.