Query Encryption for Encrypted Database Performance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional database management systems experience performance degradation and complexity when processing queries with encrypted columns, due to the need for decryption of all records, which slows down query processing and increases system load, especially when managing external encryption modules.
Innovation Solution
A query processing system that transforms user queries from an original database structure to an encrypted database structure, using a name mapping table and encryption processing unit to manage internal and external encryption modules efficiently, allowing for transparent query processing without excessive decryption, thereby improving performance and minimizing system load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all records are decrypted for query processing in encrypted columns, then query results can be obtained, but query processing speed deteriorates and system load increases
Solution Approach 1:
The patent applies preliminary action by pre-encrypting the query conditions and values before sending them to the database. This allows the encrypted query to be processed directly against encrypted data without requiring decryption of all records, thus maintaining query accuracy while significantly improving processing speed.
Solution Approach 2:
The patent inverts the conventional approach by encrypting the query instead of decrypting the data. Rather than decrypting all records to perform queries, the system encrypts the query conditions and compares them with encrypted data directly, reversing the traditional decryption-centric model.
2Reliability
If external encryption modules are referenced for column encryption, then encryption functionality is provided, but system complexity increases and performance slows down
Solution Approach 1:
The patent merges the encryption functionality directly into the database management system by providing an encryption interface within the DBMS. This integration eliminates the need for separate external encryption modules, reducing system complexity while maintaining full encryption functionality through the unified architecture.
3Reliability
If external encryption modules are referenced, then encryption capability is achieved, but processing performance deteriorates
Solution Approach 1:
By integrating encryption capabilities directly into the DBMS architecture, the system eliminates communication overhead and intermediate processing steps associated with external modules. The encrypted query processing occurs within the unified system, significantly improving performance while maintaining encryption capability.
Solution Approach 2:
The system performs encryption of query conditions and data transformation in advance, before the actual query execution. This preliminary encryption and transformation work reduces the computational burden during query processing, thereby improving overall performance while maintaining full encryption capability.
Data Source
Figure 1
Figure 2A~2B
Figure 3
AI summary
Query processing system and method by query transformation transform a user request query based on an original DB structure, destined to a DBMS of a DB with some columns encrypted, into a query based on an encrypted DB structure so that the DBMS processes the query. The query is processed irrespective of whether or not the query includes an encryption-related item, and query-processing performance is remarkably improved.