Database system and database processing method

• US 10,579,813 B2
• Filed: 05/06/2016
• Issued: 03/03/2020
• Est. Priority Date: 05/14/2015
• Status: Active Grant

• Current Assignee: Nippon Telegraph and Telephone Corporation
• Original Assignee: Nippon Telegraph and Telephone Corporation
• Inventors: Kiribuchi, Naoto, Takiguchi, Hiroyoshi
• Primary Examiner(s): Jamshidi, Ghodrat
• Application Number:
  US15/570,445
• Publication Number:
  US 20180150642A1
• Time in Patent Office: 1,397 Days
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor
• CPC Class Codes: G06F 16/21 Design, administration or maintenance of databases
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00

Abstract

A database system comprises a determining part 13 determining whether or not to conceal information to be registered in a database, a terminal device 1 that, if the determining part 13 determines that the information is to be concealed, generates N information fragments by secret-sharing the information and sends the N information fragments to a system management device 2, where N is a predetermined positive integer, the system management device 2 sending the N information fragments received from the terminal device 1 to N different database devices 3, and N database devices 3 each storing one of N information fragments received from the system management device 2.

Claims

1. A database system comprising:

processing circuitry configured to determine whether or not to conceal information to be registered in a database;

a terminal device that, when the processing circuitry determines that the information is to be concealed, generates N information fragments by secret-sharing the information and sends the N information fragments to a system management device, where N is a predetermined positive integer;

the system management device sending the N information fragments received from the terminal device to N different database devices; and

the N database devices each storing respective one of N information fragments received from the system management device,

wherein the processing circuitry determines whether or not to conceal all or part of a search condition for looking up in a database;

when the processing circuitry determines to conceal all or part of the search condition, the terminal device generates C search information fragments by secret-sharing all or part of the search condition and sends the C search information fragments to the system management device, where C is a positive integer between K, inclusive, and N, inclusive;

the system management device sends the C search information fragments received from the terminal device to C different database devices;

the C database devices find C information fragments that correspond to the C search information fragments;

the system management device sends K information fragments among the C information fragments to the terminal device; and

the terminal device reconstructs original information on the basis of the received K information fragments.

2. A database system according to claim 1,

wherein the processing circuitry determines whether or not information to be looked up in a database is concealed and, if the processing circuitry determines that the information is concealed, the system management device retrieves K information fragments stored in K different database devices among the N database devices and sends the K information fragments to the terminal device, where K is a predetermined positive integer less than or equal to N;

and

the terminal device reconstructs original information on the basis of the K information fragments received from the system management device.

3. A database processing method comprising the steps of:

determining, by processing circuitry, whether to conceal information to be registered in a database;

when the step of determining determines to conceal, generating, by a terminal device, N information fragments by secret-sharing the information, and sending the N information fragments to a system management device, where N is a predetermined positive integer;

sending, by the system management device, the N information fragments received from the terminal device to N different database devices; and

storing, by the N database devices, the N information fragments received from the system management device,

wherein the processing circuitry determines whether or not to conceal all or part of a search condition for looking up in a database;

when the processing circuitry determines to conceal all or part of the search condition, the terminal device generates C search information fragments by secret-sharing all or part of the search condition and sends the C search information fragments to the system management device, where C is a positive integer between K, inclusive, and N, inclusive;

the system management device sends the C search information fragments received from the terminal device to C different database devices;

the C database devices find C information fragments that correspond to the C search information fragments;

the system management device sends K information fragments among the C information fragments to the terminal device; and

the terminal device reconstructs original information on the basis of the received K information fragments.