Multi-tenant Index Encryption with Unique Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to provide effective search capabilities for encrypted voice transcripts while ensuring data confidentiality in multi-tenant environments, where data from multiple clients is stored in the same database, and there is a risk of unauthorized access.
Innovation Solution
A method is implemented where each client's index data is stored in a separate area of the database and encrypted with a unique key, ensuring only authorized access, with an index created for transcripts to facilitate searches and protect client data by using separate encryption keys for each user.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encrypted data is stored in a shared database for multi-tenant environments, then data confidentiality is improved, but search capability deteriorates because typical search tools cannot work with encrypted data
Solution Approach 1:
The patent introduces an intermediary component (search service/processor) that mediates between the encrypted data storage and search operations. This intermediary handles the decryption of search terms and the matching process against encrypted data, allowing search functionality to work with encrypted storage without compromising confidentiality. The intermediary translates search requests into operations that can be performed on encrypted data structures.
2Productivity
If data from multiple clients is stored in the same database to improve resource utilization, then productivity is improved, but data security deteriorates due to risk of unauthorized access to other clients' data
Solution Approach 1:
The patent applies segmentation by dividing the shared database into logically separated tenant-specific data structures. Each tenant's data is organized in isolated segments with dedicated encryption keys and access controls. This allows multiple clients to share the same physical database infrastructure while maintaining logical separation and security boundaries, preventing unauthorized access between tenants.
Solution Approach 2:
The patent implements local quality by applying tenant-specific encryption keys and security policies to each client's data segment within the shared database. Each tenant's data receives customized security treatment appropriate to their specific requirements, while still benefiting from the shared infrastructure. This enables differentiated security levels and access controls for different clients in the same system.
3Reliability
If index data is stored separately for each user to protect confidentiality, then data security is improved, but device complexity increases due to multiple separate indexes and encryption keys
Solution Approach 1:
The patent merges multiple tenant-specific encrypted index structures into a unified searchable framework. Rather than maintaining completely separate index systems for each tenant, the patent combines them into a single database structure that uses tenant identifiers and encryption keys to logically separate and secure each tenant's data. This reduces the operational complexity of managing multiple independent index systems while maintaining security boundaries.
Data Source
AI summary
Methods, systems, and computer programs are presented for secure data encryption in a multi-tenant service platform. One method includes an operation for detecting a write request to write index data to storage. The write request is from a first user from a group of users, and the storage is configured to store index data for the group of users. Further, the method includes operations for authenticating that the first user is approved for access to the storage, and for identifying a first encryption key for the first user, where each user from the group of users has a separate encryption key. Further yet, the method includes encrypting the index data with the first encryption key and storing the encrypted index data in the storage.