Encrypted Multi-Map Access for Concurrent Secure Query Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing end-to-end encryption technologies face challenges in securing data against adversaries that exploit data leakage, particularly in multi-writer multi-reader settings, and managing state consistency across multiple clients, while supporting concurrent operations and resilience to client failures.
Innovation Solution
Implementing a multi-map data structure encryption scheme with stateless and concurrent operations, using encrypted multi-maps and associated encryption schemes to secure data access, support multiple clients, and ensure resilience to client failures, while maintaining snapshot security and efficient query execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If end-to-end encryption is implemented to secure data, then security is improved, but query execution capability deteriorates
Solution Approach 1:
The patent introduces encrypted multi-map data structures as intermediaries between the encrypted data and query operations. These data structures enable queries to be executed on encrypted data without decryption, acting as a mediator that preserves both security and query capability. The encrypted multi-maps allow selective decryption or computation on specific data elements while maintaining overall encryption.
2Adaptability or versatility
If multi-writer multi-reader settings are supported, then system versatility is improved, but state consistency management becomes more complex
Solution Approach 1:
The patent segments the state management by introducing version vectors and timestamps that divide the global state into manageable, independently trackable components. Each writer and reader operates with its own version information, allowing parallel operations without requiring complex centralized coordination. This segmentation enables multi-writer multi-reader access while keeping state consistency tracking decomposed and manageable.
3Reliability
If snapshot security is maintained across concurrent operations, then security reliability is improved, but operation overhead increases
Solution Approach 1:
The patent implements preliminary actions by pre-establishing encryption contexts and version markers before concurrent operations begin. Snapshot references are created in advance with associated security contexts, allowing subsequent read operations to efficiently verify security without re-evaluating the entire state. This preliminary setup reduces the overhead during actual concurrent operations while maintaining snapshot security guarantees.
Data Source
AI summary
According to some aspects, provided are systems and methods that implement end-to-end encryption, and provide implementation configured to secure information during execution of queries on an encrypted data source. Various embodiments include multiple encrypted multi-map data structures and associated encryption schemes configured to securely read, write, and delete information while supporting any one or more of the following features: snapshot security, multiple client support, efficient execution under concurrent operation, and resilience to client failures. In various embodiments, addressable multi-map data structures enable concurrent access, and allow correct operation under polynomial time constraints.