Systems and methods for client-side and field-level encryption with dynamic schema databases
A database system comprising a database having a dynamic schema and comprising a plurality of data storage nodes; and at least one processor configured to, using an encryption process: manage access to plaintext data stored in the plurality of data storage nodes by users employing at least one client-controlled resource in a client access layer; restrict access to the plaintext data by other users, wherein the other users include users with system administration privileges for the database and administrators of processing resources hosting the database; and manage access to encrypted copies of the plaintext data by the users with system administration privileges for the database such that the system administration privileges do not enable access to plaintext versions of the encrypted copies. A method for managing data security for a database. A database system with a dynamic schema architecture, a client access layer, and an operational database layer.
1. A database system comprising:
a database having a dynamic schema and comprising a plurality of data storage nodes, wherein the database is configured to store at least one document; and
at least one processor configured to:
using an encryption process at a field-level in the database having the dynamic schema, enable specification of encryption in a client access layer on a minimum of at least one data field within the at least one document; and
manage access to the at least one data field within the at least one document such that:
system administration privileges for the database having the dynamic schema do not enable access to a plaintext version of the at least one data field within the at least one document, and
at least one data key enables access to the plaintext version of the at least one data field within the at least one document.
2. The database system of claim 1 , wherein at least one client-controlled resource manages the at least one data key without which the at least one data field cannot be decrypted.
3. The database system of claim 2 , wherein the at least one processor is configured to, using the encryption process, restrict access to the at least one data key to users having permission within the client access layer.
4. The database system of claim 2 , wherein the at least one document is associated with at least the at least one data key.
5. The database system of claim 2 , wherein the at least one processor is further configured to:
receive a request for the at least one data key; and
process the request.
6. The database system of claim 1 , wherein the at least one processor is configured to use the encryption process under a zero trust security model.
7. The database system of claim 1 , wherein the database follows an eventual consistency model.
8. The database system of claim 1 , wherein the encryption process is independent of database access policy.
9. The database system of claim 1 , wherein root privileges for the database do not enable access to the plaintext version of the at least one data field within the at least one document.
10. The database system of claim 1 , wherein the at least one processor is configured to:
manage access, by users employing at least one client-controlled resource in the client access layer, to plaintext data stored in the plurality of data storage nodes; and
restrict access to the plaintext data by other users, wherein the other users include users with system administration privileges for the database and administrators of processing resources hosting the database.
11. A method for managing data security for a database having a dynamic schema and comprising a plurality of data storage nodes, wherein the database is configured to store at least one document, the method comprising:
using an encryption process at a field-level in the database having the dynamic schema, enabling specification of encryption in a client access layer on a minimum of at least one data field within the at least one document; and
managing access to the at least one data field within the at least one document such that:
system administration privileges for the database having the dynamic schema do not enable access to a plaintext version of the at least one data field within the at least one document, and
at least one data key enables access to the plaintext version of the at least one data field within the at least one document.
12. At least one computer-readable storage medium having instructions recorded thereon which, when executed by a computer, cause the computer to perform a method for managing data security for a database having a dynamic schema and comprising a plurality of data storage nodes, wherein the database is configured to store at least one document, the method comprising:
using an encryption process at a field-level in the database having the dynamic schema, enabling specification of encryption in a client access layer on a minimum of at least one data field within the at least one document; and
managing access to the at least one data field within the at least one document such that:
system administration privileges for the database having the dynamic schema do not enable access to a plaintext version of the at least one data field within the at least one document, and
at least one data key enables access to the plaintext version of the at least one data field within the at least one document.
13. The at least one computer-readable storage medium of claim 12 , wherein at least one client-controlled resource manages the at least one data key without which the at least one data field cannot be decrypted.
14. The at least one computer-readable storage medium of claim 13 , wherein the method further comprises, using the encryption process, restricting access to the at least one data key to users having permission within the client access layer.
15. The at least one computer-readable storage medium of claim 13 , wherein the at least one document is associated with at least the at least one data key.
16. The at least one computer-readable storage medium of claim 13 , wherein the method further comprises:
receiving a request for the at least one data key; and
processing the request.
17. The at least one computer-readable storage medium of claim 12 , wherein the method further comprises using the encryption process under a zero trust security model.
18. The at least one computer-readable storage medium of claim 12 , wherein the encryption process is independent of database access policy.
19. The at least one computer-readable storage medium of claim 12 , wherein root privileges for the database do not enable access to the plaintext version of the at least one data field within the at least one document.
20. The at least one computer-readable storage medium of claim 12 , the method further comprising:
managing access, by users employing at least one client-controlled resource in the client access layer, to plaintext data stored in the plurality of data storage nodes; and
restricting access to the plaintext data by other users, wherein the other users include users with system administration privileges for the database and administrators of processing resources hosting the database.