INCREASING SEARCH ABILITY OF PRIVATE, ENCRYPTED DATA

摘要

Techniques are provided to allow full search for encrypted data within a database. In some embodiments, searchable data may be separated into different searchable tables in a database in such a way that encrypted data is stored as plaintext but has no usable link to other data within the source database. In some embodiments, performing a query on a particular user data may result in the retrieval of an encrypted identifier, which may then be decrypted via an encryption module. A second search based on the decrypted identifier may produce a set of relevant search results from a source table.

主权项

1. A method for searching a database to obtain data, comprising:
receiving, by a computer database system, a search string; searching a first table of the computer database system using the search string to identify a matching string, wherein the first table includes an encrypted foreign key for each field; obtaining at least one encrypted foreign key corresponding to the matching string identified using the search string; sending the at least one encrypted foreign key to a decryption engine executing on one or more processors of the computer database system; receiving from the decryption engine, at least one decrypted foreign key corresponding to the at least one encrypted foreign key; searching a second table of the computer database system using the at least one decrypted foreign key to obtain encrypted data; sending the encrypted data to the decryption engine to decrypt the encrypted data; and receiving, from the decryption engine, decrypted data resulting from decryption of the encrypted data.