Granted Patent B2

US 10,229,286 · App. 15/630,871 · Granted Mar 12, 2019

Abstract

Claims (64)

1. A computer implemented method comprising:

receiving a write request to a database, the write request specifying an original table (OT) name of one of a plurality of tables in the database, a column name of one of a plurality of columns in the OT, and a data entry to be written;

determining a row of the OT where the data entry was to be written, the row of the OT corresponding to an OT row identifier;

preparing an additional authenticated data (AAD) comprising the OT name, the column name, and the OT row identifier;

obtaining a cipher text based on the data entry and the AAD, wherein the cipher text encodes the data entry and the AAD together; and

writing the cipher text to a ET location in a cipher text column of an encrypted table (ET) different than the OT, the ET location being in a row of the ET where the row also stores the OT name, the column name, and the OT row identifier.

2. The computer implemented method of claim 1 , wherein the OT row identifier is an OT primary key identifying a row of the OT.

3. The computer implemented method of claim 2 , wherein the write request further comprises the OT primary key, and determining the row of the OT comprises:

extracting the OT primary key from the write request.

4. The computer implemented method of claim 1 , wherein the data entry is not written to the OT.

5. The computer implemented method of claim 1 , further comprising:

writing the data entry to an OT location in the OT corresponding to the column name and the OT row identifier.

6. The computer implemented method of claim 1 , further comprising:

deleting the data entry from the OT.

7. The computer implemented method of claim 1 , wherein obtaining the cipher text comprises:

communicating the data entry, the AAD, and an identification of a cryptographic key to a cryptography service; and

responsive to the communication, receiving a cipher text from the cryptography service.

8. The computer implemented method of claim 1 , further comprising:

accessing the row of the ET corresponding to the OT row identifier;

creating a second AAD based on at least some of the contents of the row other than the cipher text;

communicating the cipher text and the second AAD to a cryptography service;

responsive to the cryptography service returning the data entry, validating the encryption as successful; and

responsive to the cryptography service returning a decryption error, reporting that the encryption was unsuccessful or that a write attack has occurred.

9. The computer implemented method of claim 1 , wherein writing the cipher text to the ET location further comprises:

writing the OT name to an original table column in the row of the ET;

writing the column name to a column name column in the row of the ET; and

writing the OT row identifier to an OT primary key column in the row of the ET.

10. The computer implemented method of claim 1 , wherein writing the cipher text to the ET location further comprises:

writing to a key revision column at least one of an identifier for the cryptographic key and an identifier of a generation of a cryptographic key.

11. A computer implemented method comprising:

receiving a read request to a database, the read request including an original table (OT) name of one of a plurality of tables in the database and a column name of one of a plurality of columns in the OT;

determining a row of the OT where the data entry was to be read from, the row of the OT corresponding to an OT row identifier;

reading a data entry from a first location in the OT corresponding to the column name and OT row identifier of the read request;

reading a cipher text from a second location in a cipher text column of an encrypted table (ET) different than the OT, the second location being in a row of the ET where the row also stores the OT name, the column name, and the OT row identifier;

preparing, as read from the ET, an additional authenticated data (AAD) comprising the OT name, the column name, and the OT row identifier;

sending a decryption request to a cryptographic service, the request comprising the cipher text and the AAD;

responsive to receiving a response that the decryption was successful, receiving a plaintext version of the cipher text and validating the encryption as successful if the plaintext version of the cipher text matches the data entry accessed from the OT.

12. A non-transitory computer readable medium comprising instructions that, when executed by a processor of a device, cause the processor to perform the steps of:

receiving a write request to a database, the write request specifying an original table (OT) name of one of a plurality of tables in the database, a column name of one of a plurality of columns in the OT, and a data entry to be written;

determining a row of the OT where the data entry was to be written, the row of the OT corresponding to an OT row identifier;

preparing an additional authenticated data (AAD) comprising the OT name, the column name, and the OT row identifier;

obtaining a cipher text based on the data entry and the AAD, wherein the cipher text encodes the data entry and the AAD together; and

writing the cipher text to a ET location in a cipher text column of an encrypted table (ET) different than the OT, the ET location being in a row of the ET where the row also stores the OT name, the column name, and the OT row identifier.

13. The non-transitory computer readable medium of claim 12 , wherein the OT row identifier is an OT primary key identifying a row of the OT.

14. The non-transitory computer readable medium of claim 12 , wherein the write request further comprises the OT primary key, and determining the row of the OT comprises:

extracting the OT primary key from the write request.

15. The non-transitory computer readable medium of claim 12 , wherein the data entry is not written to the OT.

16. The non-transitory computer readable medium of claim 12 , wherein the instructions further cause the processor to perform the steps of:

writing the data entry to an OT location in the OT corresponding to the column name and the OT row identifier.

17. The non-transitory computer readable medium of claim 12 , wherein the instructions further cause the processor to perform the steps of:

deleting the data entry from the OT.

18. The non-transitory computer readable medium of claim 12 , wherein obtaining the cipher text comprises:

communicating the data entry, the AAD, and an identification of a cryptographic key to a cryptography service; and

responsive to the communication, receiving a cipher text from the cryptography service.

19. The non-transitory computer readable medium of claim 12 , wherein the instructions further cause the processor to perform the steps of:

accessing the row of the ET corresponding to the OT row identifier;

creating a second AAD based on at least some of the contents of the row other than the cipher text;

communicating the cipher text and the second AAD to a cryptography service;

responsive to the cryptography service returning the data entry, validating the encryption as successful; and

responsive to the cryptography service returning a decryption error, reporting that the encryption was unsuccessful or that a write attack has occurred.

20. The non-transitory computer readable medium of claim 12 , wherein writing the cipher text to the ET location further comprises:

writing the OT name to an original table column in the row of the ET;

writing the column name to a column name column in the row of the ET; and

writing the OT row identifier to an OT primary key column in the row of the ET.

Assignments (6)