Secure database searching
Methods and systems for securely storing data in a database are described herein. According to an aspect, a technique may include receiving data to be stored, dividing the data into a plurality of elements, encrypting each element of the plurality of elements with an encryption function, combining the encrypted elements to form a data attribute, and storing the data attribute in the database. According to another aspect, a technique for searching a database having encrypted data attributes may include receiving a search term, encrypting the search term with an encryption function, and searching a database for records having data attributes matching the encrypted search term.
1. A method of searching a database having encrypted data attributes comprising the steps of:
receiving a search term;
dividing the search term into a plurality of elements;
encrypting each element of the plurality of elements with an encryption function;
combining all of the encrypted elements to form an encrypted search term;
modifying the encrypted search term by removing from the encrypted search term all non-alphanumeric characters and replacing the removed characters with alphanumeric characters;
searching a database for records having data attributes matching the modified encrypted search term;
retrieving the records having data attributes matching the encrypted search term; and
decrypting the retrieved records.
2. The method of claim 1 further comprising applying a second encryption function to the search term before searching the database.
3. The method of claim 1 , wherein the search is performed by a SQL query.
4. A system for searching a database having encrypted data attributes comprising:
a processor controlling one or more operations of the system;
a database; and
memory storing computer readable instructions that, when executed by the processor, configure the system to:
receive a search term;
divide the search term into a plurality of elements;
encrypt each element of the plurality of elements with an encryption function;
combine all of the encrypted elements to form an encrypted search term;
modifying the encrypted search term by removing from the encrypted search term all non-alphanumeric characters and replacing the removed characters with alphanumeric characters;
search the database for records having data attributes matching the modified encrypted search term;
retrieve the records having data attributes matching the encrypted search term; and
decrypt the retrieved records.
5. The system of claim 4 wherein the instructions, when executed, further configure the system to perform applying a second encryption function to the search term before searching the database.
6. The system of claim 4 , wherein the search is performed by a SQL query of the database.
7. One or more non-transitory computer readable media comprising computer readable instructions which, when executed, cause a system to search a database having encrypted data attributes by:
receiving a search term;
dividing the search term into a plurality of elements;
encrypting each element of the plurality of elements with an encryption function;
combining all of the encrypted elements to form an encrypted search term;
modifying the encrypted search term by removing from the encrypted search term all non-alphanumeric characters and replacing the removed characters with alphanumeric characters;
searching a database for records having data attributes matching the modified encrypted search term;
retrieving the records having data attributes matching the encrypted search term; and
decrypting the retrieved records.
8. The computer readable media of claim 7 wherein the instructions, when executed, further configure the system to perform applying a second encryption function to the search term before searching the database.
9. The computer readable media of claim 7 , wherein the search is performed by a SQL query of the database.