System and methods for data encryption and application-agnostic querying of encrypted data

1. A method, comprising:

identifying, via a processor, selected data for encryption by detecting tagged data within a data repository accessible by the processor;

applying, via the processor, encryption to the selected data, to produce encrypted data;

receiving, at the processor, a query originating from a software application, the query including a LIKE operator;

translating the query, via the processor, into a modified query compatible with the encrypted data, the modified query including a custom match function call configured to retrieve ngram-matched portions of the encrypted data;

causing, via the processor, execution of the modified query, thereby producing query results, the query results including a subset of the encrypted data; and

sending, via the processor, the query results to the software application without decrypting the subset of the encrypted data.

2. The method of claim 1 , wherein the query is a range query.

3. The method of claim 1 , wherein the encryption is a deterministic encryption.

4. The method of claim 1 , wherein the encryption is an order-preserving encryption.

5. The method of claim 1 , wherein the encryption is a numeric encryption.

6. The method of claim 1 , wherein the software application is a first software application, the query is a first query, the modified query is a first modified query, the query results are first query results, and the subset of the encrypted data is a first subset of the encrypted data, the method further comprising:

receiving, at the processor, a second query, from a second software application different from the first software application;

translating the second query, via the processor, into a second modified query compatible with the encrypted data;

causing, via the processor, execution of the second modified query, thereby producing second query results, the second query results including a second subset of the encrypted data; and

sending, via the processor, the second query results to the second software application without decrypting the second subset of the encrypted data.

7. The method of claim 1 , wherein the software application is a first software application, the query is a first query, the modified query is a first modified query, the query results are first query results, and the subset of the encrypted data is a first subset of the encrypted data, the method further comprising:

receiving a second query, from a second software application, the second query having a second protocol different from a first protocol;

translating the second query, via the processor, into a second modified query compatible with the encrypted data;

causing, via the processor, execution of the second modified query, thereby producing second query results, the second query results including a second subset of the encrypted data; and

sending, via the processor, the second query results to the second software application without decrypting the second subset of the encrypted data.

8. The method of claim 1 , wherein the tagged data includes at least one of personally identifiable information (PII) or personal health information (PHI).

9. The method of claim 1 , wherein the causing the execution of the modified query includes generating a token based on the query originating from the software application.

10. A method, comprising:

identifying, via a processor, selected data for encryption by detecting tagged data within a data repository accessible by the processor;

applying, via the processor, encryption to the selected data, to produce encrypted data;

receiving, at the processor, a query originating from a software application, the query including a LIKE operator;

translating the query, via the processor, into a modified query compatible with the encrypted data, the modified query including a custom match function call configured to retrieve ngram-matched portions of the encrypted data;

causing, via the processor, execution of the modified query, thereby producing query results, the query results including a subset of the encrypted data; and

sending, via the processor, the query results to the software application without re-encrypting the subset of the encrypted data.

11. The method of claim 10 , wherein the query is a range query.

12. The method of claim 10 , wherein the encryption is a deterministic encryption.

13. The method of claim 10 , wherein the encryption is an order-preserving encryption.

14. The method of claim 10 , wherein the encryption is a numeric encryption.

15. The method of claim 10 , wherein the software application is a first software application, the query is a first query, the modified query is a first modified query, the query results are first query results, and the subset of the encrypted data is a first subset of the encrypted data, the method further comprising:

receiving, at the processor, a second query, from a second software application different from the first software application;

translating the second query, via the processor, into a second modified query compatible with the encrypted data;

causing, via the processor, execution of the second modified query, thereby producing second query results, the second query results including a second subset of the encrypted data; and

sending, via the processor, the second query results to the second software application without re-encrypting the second subset of the encrypted data.

16. The method of claim 10 , wherein the software application is a first software application, the query is a first query, the modified query is a first modified query, the query results are first query results, and the subset of the encrypted data is a first subset of the encrypted data, the method further comprising:

receiving a second query, from a second software application, the second query having a second protocol different from a first protocol;

translating the second query, via the processor, into a second modified query compatible with the encrypted data;

causing, via the processor, execution of the second modified query, thereby producing second query results, the second query results including a second subset of the encrypted data; and

sending, via the processor, the second query results to the second software application without re-encrypting the second subset of the encrypted data.

17. The method of claim 10 , wherein the tagged data includes at least one of personally identifiable information (PII) or personal health information (PHI).

18. The method of claim 10 , wherein the causing the execution of the modified query includes generating a token based on the query originating from the software application.

19. A non-transitory, processor-readable medium storing processor-readable instructions to cause a processor to:

identify selected data for encryption by detecting tagged data within a data repository accessible by the processor;

apply encryption to the selected data, to produce encrypted data;

receive a query originating from a software application, the query including a LIKE operator;

translate the query into a modified query compatible with the encrypted data, the modified query including a custom match function call configured to retrieve ngram-matched portions of the encrypted data;

cause execution of the modified query, to produce query results, the query results including a subset of the encrypted data; and

send the query results to the software application without decrypting the subset of the encrypted data.

20. A non-transitory, processor-readable medium storing processor-readable instructions to cause a processor to:

identify selected data for encryption by detecting tagged data within a data repository accessible by the processor;

apply encryption to the selected data, to produce encrypted data;

receive a query originating from a software application, the query including a LIKE operator;

translate the query into a modified query compatible with the encrypted data, the modified query including a custom match function call configured to retrieve ngram-matched portions of the encrypted data;

cause execution of the modified query, to produce query results, the query results including a subset of the encrypted data; and

send the query results to the software application without re-encrypting the subset of the encrypted data.