Range search system, range search method, and range search program
View Patent ↗In case of a range search to the encryption DB (database), conventionally, because there is a correlation between a value of the data and the number of search keys for the range search, the contents of the encrypted data can be inferred and are not safe. Also, it is not efficient sufficiently in case of insertion of the data, and search. In the present invention, the search keys related by the data are generated for a predetermined number without depending on the value of the data. Also, when the search keys showing a range are generated, the search keys are provided from the search key having a narrow width to the search key having a wide range, and the widths have a relation of a power series length, to suppress the number of necessary search keys.
1. A range search system comprising:
data input means for receiving an encryption data generation key, an encryption search key generation key, and data to be inserted in an encryption DB (database);
encrypting means for encrypting said data by using said encryption data generation key to generate encrypted data;
search key generating means for generating search keys for a range search;
encryption search key generating means for encrypting the search keys of the range search by using said encryption search key generation key to generating encryption search keys; and
double encrypting means for encrypting said encrypted data by using each of the encryption search keys,
wherein said search key generating means generates the search keys for range search, and
wherein a number of the search keys is constant without depending on a value of said data.
2. The range search system according to claim 1 , wherein said search key generating means generates the search keys corresponding to a case of a narrow range width and a case of a wide range width for one data.
3. The range search system according to claim 1 , wherein said search key generating means generates the search keys for one data such that said range widths have a relation of power series length.
4. The range search system according to claim 1 , further comprising:
data inquiring means for receiving information of ranges to be inquired to said encryption DB; and
range search key generating means for generating the search keys corresponding to said range,
wherein said data inquiring means generates an inquiry based on the range search keys corresponding to said range, to issue to said encryption DB.
5. A range search method to an encryption DB (database) by a computer, said method comprising:
receiving an encryption data generation key, an encryption search key generation key, and data to be inserted in said encryption DB;
encrypting the data by using the encryption data generation key, to generate encrypted data;
generating search keys of a predetermined number for a range search;
encrypting said search keys by using said encryption search key generation key, to generate encryption search keys; and
encrypting said encrypted data by using said encryption search key;
wherein a number of the search keys is constant without depending on a value of said data.
6. The range search method according to claim 5 , wherein said generating search keys comprises:
generating said search keys corresponding to a narrow range width and a wide range width for one data.
7. The range search method according to claim 5 , wherein said generating search keys comprises:
generating said search keys for one data such that allocated range widths have a relation of power series length.
8. The range search method according to claim 5 , further comprising:
receiving information of the range to be inquired to said encryption DB;
generating the search keys corresponding to said range; and
generating an inquiry based on the search keys corresponding to said range to issue to said encryption DB.
9. A computer-readable non-transitory recording medium in which a computer-executable range search program code is stored to attain a range search method which comprises:
receiving data, encryption data generation key, and an encryption search key generation key to be inserted in an encryption DB (database);
encrypting said data by using said encryption data generation key, to generate encrypted data;
generating search keys of a predetermined number for range search;
encrypting said search keys by using said encryption search key generation key, to generate encryption search keys; and
encrypting said encrypted data by using said encryption search key;
wherein a number of the search keys is constant without depending on a value of said data.
10. The computer-readable non-transitory recording medium according to claim 9 , wherein said generating search keys comprises:
generating said search keys corresponding to a narrow range width and a wide range width for one data.
11. The computer-readable non-transitory recording medium according to claim 9 , wherein said generating search keys comprises:
generating said search keys for one data such that allocated range widths have a relation of power series length.
12. The computer-readable non-transitory recording medium according to claim 9 , further comprising:
receiving information of the range to be inquired to said encryption DB;
generating the search keys corresponding to said range; and
generating an inquiry based on the search keys corresponding to said range to issue to said encryption DB.