Trusted storage systems and methods
View Patent ↗Systems and methods are disclosed for providing a trusted database system that leverages a small amount of trusted storage to secure a larger amount of untrusted storage. Data are encrypted and validated to prevent unauthorized modification or access. Encryption and hashing are integrated with a low-level data model in which data and meta-data are secured uniformly. Synergies between data validation and log-structured storage are exploited.
1. A method for protecting a database system from external analysis and attack, the method comprising:
disguising the size of data blocks targeted for storage on a storage medium;
disguising the frequency with which data blocks are written to the storage medium; and
disguising the location at which data blocks are stored on the storage medium, including relocating data blocks that were previously stored on the storage medium to new, quasi-randomly selected locations on the storage medium when said data blocks are rewritten or updated.
2. The method as in claim 1 , in which disguising the size of data blocks includes padding the data blocks with additional data.
3. The method as in claim 2 , in which the data blocks are padded such that each block falls within predefined size limitations.
4. The method as in claim 2 , in which the data blocks are padded such that each block is of substantially the same size as the other data blocks.
5. The method as in claim 1 , in which disguising the frequency with which data blocks are written to the storage medium includes:
writing data blocks to the storage medium at a substantially constant frequency.
6. The method as in claim 1 , in which disguising the frequency with which data blocks are written to the storage medium includes:
writing data blocks to the storage medium at a frequency that varies according to a predefined pattern.