Perimeter encryption method and system

摘要

A method and system for consistent format preserving encryption (C-FPE) are provided to protect data while the data is in a domain while allowing encrypted data to be treated inside the domain as if it were the unencrypted data. The method includes inserting a coupling into a data flow at a perimeter of the domain, and translating a data element from an unprotected data element to a protected data element using the coupling such that the data element is a protected data element within the domain.

主权项

1. A method of protecting a data element within a domain, the method comprising:
inserting a coupling into a data flow at a perimeter of the domain, wherein the data flow through the coupling into the domain comprises the data element; and translating the data element between an unprotected form and a protected form using the coupling; wherein translating the data element from the unprotected form to the protected form comprises encrypting the data element using an encryption mechanism that preserves syntax, internal semantics and coherence of the data element after translation to the protected form; wherein the encryption mechanism uses a keyset to encrypt the data element; wherein translating the data element from the unprotected form and the protected form comprises:
consistently encrypting the data element to a corresponding encrypted element which is substantially the same encrypted element each time the data element is encrypted.