Granted Patent B2

US 12,743,536 · App. 18/838,987 · Granted Sep 22, 2026

Inventors: Hyungon Moon (Ulsan, KR); Sam Hyuk Noh (Ulsan, KR); Ig Jae Kim (Ulsan, KR); Junghyun Kim (Ulsan, KR); Minu Chung (Ulsan, KR)

Assignee: UNIST (ULSAN NATIONAL INSTITUTE OF SCIENCE AND TECHNOLOGY)

G06F21/6218G06F21/602G06F21/64

Abstract

Claims (57)

1 . A method, performed by a processor, comprising:

receiving a lookup request comprising an object key from a user;

retrieving the object key from a table stored in an enclave page cache (EPC) of a memory;

retrieving the object key from a table of a log-structured merge-tree stored in a storage distinct from the memory, when the object key fails to be retrieved from the table stored in the EPC;

obtaining a value corresponding to the object key and a reference message authentication code from the storage, when the object key is retrieved from a target table of the log-structured merge-tree stored in the storage; and

verifying an integrity of the value based on the reference message authentication code;

wherein the obtaining of the value corresponding to the object key and the reference message authentication code from the storage comprises:

obtaining the value corresponding to the object key and the reference message authentication code corresponding to the value from a value block of a target data block, when the object key is retrieved from a key block of the target data block.

2 . The method of claim 1 , wherein the verifying of the integrity of the value based on the reference message authentication code comprises:

obtaining, from the EPC, a target authentication key mapped to the target table among authentication keys mapped to tables of the log-structured merge-tree;

computing a comparative message authentication code for the value, based on the target authentication key obtained from the EPC and the value obtained from the storage; and

verifying the integrity of the value by comparing the computed comparative message authentication code with the obtained reference message authentication code.

3 . The method of claim 1 , wherein the retrieving of the object key from the table of the log-structured merge-tree stored in the storage comprises:

initiating a retrieval of the object key, starting from a lowest level of the log-structured merge-tree stored in the storage;

re-retrieving the object key from a level subsequent to a level at which the retrieval of the object key is being performed, when the object key fails to be retrieved at the level at which the retrieval of the object key is being performed; and

terminating the retrieval of the object key, when the object key is retrieved at the level at which the retrieval of the object key is being performed.

4 . The method of claim 1 , wherein the retrieving of the object key from the table of the log-structured merge-tree stored in the storage comprises:

determining a target data block having a possibility of including the object key, based on an index block of the target table among a plurality of data blocks of the target table of the log-structured merge-tree, the index block indicating a range of an object key included in the plurality of data blocks;

verifying an order of a key block having object keys of a plurality of key-value pairs of the target data block; and

retrieving the object key from the key block, when the order of the key block of the target data block is verified.

5 . The method of claim 4 , wherein the retrieving of the object key from the table of the log-structured merge-tree stored in the storage further comprises:

re-retrieving the object key by changing the target table to a table of a subsequent level of the target table, when the object key fails to be retrieved from the key block of the target data block.

6 . The method of claim 1 , further comprising:

obtaining a reference message authentication code corresponding to the object key and a target authentication key corresponding to a table stored in the EPC from the EPC, when the object key is retrieved from the table stored in the EPC;

obtaining a value corresponding to the object key from a partial memory of the memory distinct from the EPC; and

verifying the integrity of the value based on the reference message authentication code.

7 . The method of claim 6 , wherein the verifying of the integrity of the value based on the reference message authentication code comprises:

computing a comparative message authentication code based on the target authentication key mapped to the table stored in the EPC obtained from the EPC and the value obtained from the partial memory distinct from the EPC; and

verifying the integrity of the value by comparing the computed comparative message authentication code with the reference message authentication code.

8 . A computer program stored in a computer-readable storage medium to execute the method of claim 1 in combination with hardware.

9 . A device comprising:

a memory comprising an enclave page cache (EPC) and a partial memory distinct from the EPC;

a storage distinct from the memory;

a processor configured to receive a lookup request comprising an object key from a user, retrieve the object key from a table stored in the EPC, retrieve the object key from a table of a log-structured merge-tree stored in a storage distinct from the memory, when the object key fails to be retrieved from the table stored in the EPC, obtain a value corresponding to the object key and a reference message authentication code from the storage, when the object key is retrieved from a target table of the log-structured merge-tree stored in the storage, and verify an integrity of the value based on the reference message authentication code;

wherein the processor is configured to:

obtain the value corresponding to the object key and the reference message authentication code corresponding to the value from a value block of a target data block, when the object key is retrieved from a key block of the target data block.

10 . The device of claim 9 , wherein the processor is configured to:

obtain, from the EPC, a target authentication key mapped to the target table among authentication keys mapped to tables of the log-structured merge-tree,

compute a comparative message authentication code for the value, based on the target authentication key obtained from the EPC and the value obtained from the storage, and

verify the integrity of the value by comparing the computed comparative message authentication code with the obtained reference message authentication code.

11 . The device of claim 9 , wherein the processor is configured to:

initiate a retrieval of the object key, starting from a lowest level of the log-structured merge-tree stored in the storage,

re-retrieve the object key from a level subsequent to a level at which the retrieval of the object key is being performed, when the object key fails to be retrieved at the level at which the retrieval of the object key is being performed, and

terminate the retrieval of the object key, when the object key is retrieved at the level at which the retrieval of the object key is being performed.

12 . The device of claim 9 , wherein the processor is configured to:

determine a target data block having a possibility of including the object key, based on an index block of the target table among a plurality of data blocks of the target table of the log-structured merge-tree, the index block indicating a range of an object key included in the plurality of data blocks,

verify an order of a key block having object keys of a plurality of key-value pairs of the target data block, and

retrieve the object key from the key block, when the order of the key block of the target data block is verified.

13 . The device of claim 12 , wherein the processor is configured to:

re-retrieve the object key by changing the target table to a table of a subsequent level of the target table, when the object key fails to be retrieved from the key block of the target data block.

14 . The device of claim 9 , wherein the processor is configured to:

obtain a reference message authentication code corresponding to the object key and a target authentication key corresponding to a table stored in the EPC from the EPC, when the object key is retrieved from the table stored in the EPC,

obtain a value corresponding to the object key from a partial memory of the memory distinct from the EPC, and

verify the integrity of the value based on the reference message authentication code.

15 . The device of claim 14 , wherein the processor is configured to:

compute a comparative message authentication code based on the target authentication key mapped to the table stored in the EPC obtained from the EPC and the value obtained from the partial memory distinct from the EPC, and

verify the integrity of the value by comparing the computed comparative message authentication code with the reference message authentication code.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (16)