17550367. SECURE DATABASE-AS-A-SERVICE SYSTEM simplified abstract (INTERNATIONAL BUSINESS MACHINES CORPORATION)
SECURE DATABASE-AS-A-SERVICE SYSTEM
Organization Name
INTERNATIONAL BUSINESS MACHINES CORPORATION
Inventor(s)
Dhinakaran Vinayagamurthy of Erode (IN)
Pankaj Satyanarayan Dayama of Bangalore (IN)
Santosh Ravi Kiran Penubothula of Vijayawada (IN)
SECURE DATABASE-AS-A-SERVICE SYSTEM - A simplified explanation of the abstract
This abstract first appeared for US patent application 17550367 titled 'SECURE DATABASE-AS-A-SERVICE SYSTEM
Simplified Explanation
The abstract describes a method, system, and computer program for a secure database-as-a-service. The method involves obtaining data from client devices to be stored in encrypted databases, encrypting the data using an order preserving encryption scheme, and storing the encrypted data in the databases. The database service allows for the creation of indexes over the encrypted data to improve query processing performance.
- Obtaining data from client devices to be stored in encrypted databases
- Encrypting the data using an order preserving encryption scheme
- Storing the encrypted data in the databases
- Enabling the creation of indexes over the encrypted data to improve query processing performance
Potential Applications
- Secure storage and management of sensitive data in a database-as-a-service environment
- Protection of client device data from unauthorized access or breaches
- Improved performance of query processing in encrypted databases
Problems Solved
- Ensuring the security and privacy of data stored in a database-as-a-service
- Enabling efficient query processing on encrypted data
- Allowing for the creation of indexes on encrypted data without compromising security
Benefits
- Enhanced security and privacy of stored data through encryption
- Improved performance of query processing in encrypted databases
- Flexibility to build indexes over encrypted data for faster data retrieval
Original Abstract Submitted
Methods, systems, and computer program products for a secure database-as-a-service are provided herein. A computer-implemented method includes obtaining, by a database service, data associated with one or more client devices to be stored in at least one encrypted database; encrypting, without mutation and in accordance with one or more security requirements, at least a portion of the data using an order preserving encryption scheme, wherein the encrypting comprises (i) computing a set of encryption parameters for the portion of the data and (ii) applying a process that converts a fixed-length cipher text corresponding to the portion of the data to a variable-length cipher text; and storing the encrypted data in the at least one encrypted database, wherein the database service enables one or more indexes to be built over the encrypted data to improve performance of query processing.
