Encrypted in-memory column-store

US9213764B2 · kind B2 · utility

Assignee

• SAP SE · DE

Inventors

• Florian Kerschbaum · Walldorf, DE
• Martin Haerterich · Wiesloch, DE
• Mathias Kohler · Blankenloch, DE
• Isabelle Hang · Darmstadt, DE
• Andreas Schaad · Bruchsal, DE
• Axel Schroepfer · Heidenau, DE
• Walter Tighzert · Heidelberg, DE
• Patrick Grofig · Karlsruhe, DE

Key dates

• Filing date: Nov 22, 2013
• Grant date: Dec 15, 2015
• Expiry date: Sep 4, 2034

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F21/6227
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Embodiments relate to processing encrypted data, and in particular to identifying an appropriate layer of encryption useful for processing a query. Such identification (also known as the onion selection problem) is achieved utilizing an adjustable onion encryption procedure. Based upon defined requirements of policy configuration, alternative resolution, and conflict resolution, the adjustable onion encryption procedure entails translating a query comprising an expression in a database language (e.g. SQL) into an equivalent query on encrypted data. The onion may be configured in almost arbitrary ways directing the onion selection. An execution function introduces an execution split to allow local (e.g. client-side) query fulfillment that may otherwise not be possible in a secure manner on the server-side. A searchable encryption function may also be employed, and embodiments accommodate aggregation via homomorphic encryption. Embodiments may be implemented as an in-memory column store database system.