Meta-complete data storage
View Patent ↗The invention described herein generally relates to systems and methods of securely storing data so that the data contains information about the data and/or the encryption of the data, systems and methods of providing secure access to real world data through data transformations, and systems and methods of managing security parameters for data.
1. A method comprising:
encrypting, for each datum in a plurality of structured clear-text data comprising a first subset of clear-text characters and a second subset of clear-text characters, the first subset of clear-text characters to produce a first subset of encrypted characters, each of a plurality of subsets of encrypted characters comprising metadata describing the encryption of a subset of clear-text characters into the subset of encrypted characters such that a total length of the subset of encrypted characters and the metadata is equal to a length of the subset of clear-text characters;
storing the first subset of encrypted characters adjacent to the second subset of clear text characters within a partially encrypted datum in a database;
searching, by a processor, the second subset of clear text characters of each partially encrypted datum stored in the database with a first portion of a query term to identify a first subset of partially encrypted data, the second subset of clear text characters in each partially encrypted datum in the first subset of partially encrypted data including the first portion of the query term; and
searching, by the processor, the first subset of encrypted characters of each partially encrypted datum in the first subset of partially encrypted data with a second portion of the query term to identify a result set of partially encrypted data, each partially encrypted datum in the result set including the first portion of the query term in the second subset of clear text characters of the partially encrypted datum and the second portion of the query term in the first subset of encrypted characters of the partially encrypted datum.
2. The method of claim 1 , wherein searching the second subset of clear text characters of each partially-encrypted datum comprises pattern matching.
3. The method of claim 1 wherein searching the first subset of encrypted characters of each partially encrypted datum comprises:
decrypting the first subset of encrypted characters of the partially encrypted datum to produce a first subset of clear-text characters; and
searching the first subset of clear-text characters.
4. The method of claim 1 , wherein for each partially-encrypted datum, the first subset of encrypted characters and the second subset of clear text characters are stored in a single data element in the database.
5. A system comprising:
a database comprising a memory;
an encryption engine configured to, for each datum comprising a first subset of clear-text characters and a second subset of clear-text characters in a plurality of structured clear-text data stored in the database, encrypt the first subset of clear-text characters to produce a first subset of encrypted characters and store the first subset of encrypted characters adjacent to the second subset of clear text characters within a partially encrypted datum in the database, each of a plurality of subsets of encrypted characters comprising metadata describing the encryption of a subset of clear-text characters into the subset of encrypted characters such that a total length of the subset of encrypted characters and the metadata is equal to a length of the subset of clear-text characters; and
a search engine configured to:
search the second subset of clear text characters of each partially encrypted datum stored in the database with a first portion of a query term to identify a first subset of partially encrypted data, the second subset of clear text characters in each partially encrypted datum in the first subset of partially encrypted data including the first portion of the query term; and
search the first subset of encrypted characters of each partially encrypted datum in the first subset of partially encrypted data with a second portion of the query term to identify a result set of partially encrypted data, each partially encrypted datum in the result set including the first portion of the query term in the second subset of clear text characters of the partially encrypted datum and the second portion of the query term in the first subset of encrypted characters of the partially encrypted datum.
6. The system of claim 5 , wherein searching the second subset of clear text characters of each partially-encrypted datum comprises pattern matching.
7. The system of claim 5 wherein searching the first subset of encrypted characters of each partially encrypted datum comprises:
decrypting the first subset of encrypted characters of the partially encrypted datum to produce a first subset of clear-text characters; and
searching the first subset of clear-text characters.
8. The system of claim 5 , wherein for each partially-encrypted datum, the first subset of encrypted characters and the second subset of clear text characters are stored in a single data element in the database.