Searchable Encryption Indexing for Cloud Document Type Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud-based services pose security risks due to the lack of enterprise-level controls, and existing searchable encryption methods do not enable efficient search of encrypted documents based on document type, requiring additional local searches and compromising data security.
Innovation Solution
Implementing a searchable encryption method that encodes document type information into the encrypted search index, allowing for secure search of encrypted documents across all or specific document types using a network intermediary, which intercepts and encrypts data before it reaches the cloud service provider, and uses a pseudorandom function to generate pseudorandom labels for keyword and document indexing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption methods are used to store data in cloud-based services, then data security is improved, but the ability to search encrypted documents efficiently is lost
Solution Approach 1:
The patent segments the encryption approach by creating separate encrypted indexes for different document types (e.g., emails, contacts, calendar events). Each document type has its own encrypted index structure, allowing efficient search within that type while maintaining overall data security. This segmentation enables the system to balance security requirements with search efficiency for specific document categories.
Solution Approach 2:
The patent introduces an intermediary layer between the encrypted data and the search function. This intermediary includes encrypted indexes that mediate between the encrypted documents and search queries, enabling efficient search operations without requiring full decryption. The intermediary structures (encrypted indexes) allow the system to maintain encryption while providing search capabilities.
2Productivity
If document type information is included in the encrypted search index, then search efficiency for specific document types is improved, but the risk of revealing document type information increases
Solution Approach 1:
The patent applies local quality by encrypting document type information differently based on its location and purpose. The encrypted indexes contain transformed document type information that is encrypted using the same key derivation process as other index terms, ensuring that document type information is protected with the same security level as other data while still enabling efficient search routing.
Solution Approach 2:
The patent transforms document type information into a different parameter form through encryption. Instead of storing plain document type identifiers, the system encrypts them using the same key derivation function used for other index terms, changing the parameter representation while maintaining searchability. This transformation allows the system to preserve document type information for search efficiency while preventing information leakage.
3Adaptability or versatility
If multiple encrypted indexes are created for different document types, then search capability for specific types is improved, but system complexity increases
Solution Approach 1:
The patent achieves universality by using a single key derivation process and encryption mechanism that works across all document types. The same key derivation function and encryption algorithm are applied uniformly to all index terms regardless of document type, allowing the system to handle multiple document types with a consistent, unified approach rather than requiring separate complex systems for each type.
Solution Approach 2:
The patent merges the encryption and indexing processes into a unified system. Rather than creating separate encryption and indexing mechanisms for each document type, the system combines these functions by applying the same key derivation and encryption process to all document types, reducing overall system complexity while maintaining the ability to search specific document types efficiently.
Data Source
AI summary
A searchable encryption method enables encrypted search of encrypted documents based on document type. In some embodiments, the searchable encryption method is implemented in a network intermediary, such as a proxy server. The network intermediary encrypts documents on behalf of a user or an enterprise destined to be stored on a cloud service provider. The searchable encryption method encodes document type information into the encrypted search index while preserving encryption security. Furthermore, the searchable encryption method enables search of encrypted documents using the same encrypted index, either for a particular document type or for all encrypted documents regardless of the document type.