Compression of encrypted data in database management systems

• US 20080162521A1
• Filed: 12/28/2006
• Published: 07/03/2008
• Est. Priority Date: 12/28/2006
• Status: Active Grant

• Current Assignee: Teradata US, Inc. (Teradata Corporation)
• Original Assignee: Teradata US, Inc. (Teradata Corporation)
• Inventors: Browning, James
• Granted Patent: US 7,730,106 B2
• Time in Patent Office: Days
• US Class Current: 707/101
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries

Abstract

The subject mater herein relates to database management systems and, more particularly, compression of encrypted data in database management systems. Various embodiments provide systems, methods, and software that compress encrypted column values stored tables. Some other embodiments include declaring tables with column encrypt and compress attributes.

Claims

1. A method comprising:

declaring a table in a database management system having one or more columns including an encrypted column with one or more constant values to be encrypted and compressed; and

initializing the declared table, wherein the initialization includes;

encrypting each constant value according to an encryption key to produce a cipher text for each constant value; and

storing each cipher text in a header of the table.

2. The method of claim 1, wherein the encryption key is associated with the table when the table is declared.

3. The method of claim 1, wherein the encryption key is declared globally within the database management system.

4. The method of claim 1, further comprising:

inserting a row of data into the initialized table, wherein inserting a row includes;

for each column of data to be populated in the row, determining if the column is to be compressed and encrypted;

if the column is to be compressed and encrypted, encrypting the column value to produce a cipher text; and

if the cipher text matches a cipher value stored in the table header, compressing the encrypted column value.

5. The method of claim 1, wherein the encryption key is a 128-bit Advanced Encryption Standard key.

6. The method of claim 1, wherein the database management system is a relational database management system.

7. The method of claim 1, further comprising:

selecting one or more rows of data from the initialized table, wherein selecting a row includes;

for each column of data to be selected in the row, determining if the column is to be uncompressed and decrypted; and

if the column is to be uncompressed and decrypted, retrieving a cipher text value from the table header and decrypting the value to produce the clear text representation.

8. A system comprising:

a database management system including column data encryption and compression services that;

service column declaration of table declaration statements including a declaration of a column to be encrypted and compressed; and

service column initialization of a declared table where the column is declared to be encrypted and compressed by encrypting each declared column constant to produce a cipher text for each constant and store the constant in a header of the table.

9. The system of claim 8, wherein the column data encryption and compression services further process a row to be inserted into a table having an encrypted and compressed row by;

for each column of data to be populated in the row, determining if the column is to be compressed and encrypted;

if the column is to be compressed and encrypted, encrypting the column value to produce a cipher text; and

if the cipher text matches a cipher value stored in the table header, compressing the encrypted column value.

10. The system of claim 8, wherein the encryption key is associated with the table when the table is declared.

11. The system of claim 8, wherein the encryption key is declared globally within the database management system.

12. The system of claim 8, wherein the encryption key is a 128-bit Advanced Encryption Standard key.

13. The system of claim 8, wherein the database management system is a relational database management system.

14. A machine-readable medium, with instructions which when processed cause a machine to:

declare a table in a database management system having one or more columns including an encrypted column with one or more constant values to be encrypted and compressed; and

initialize the declared table, wherein the initialization includes;

encrypting each constant value according to an encryption key to produce a cipher text for each constant value; and

storing each cipher text in a header of the table.

15. The machine-readable medium of claim 14, wherein the encryption key is associated with the table when the table is declared.

16. The machine-readable medium of claim 14, wherein the encryption key is declared globally within the database management system.

17. The machine-readable medium of claim 14, including further instructions, which when process further cause the machine to:

insert a row of data into the initialized table, wherein inserting a row includes;

for each column of data to be populated in the row, determining if the column is to be compressed and encrypted;

if the column is to be compressed and encrypted, encrypting the column value to produce a cipher text; and

if the cipher text matches a cipher value stored in the table header, compressing the encrypted column value.

18. The machine-readable medium of claim 14, wherein the encryption key is a 128-bit Advanced Encryption Standard key.

19. the machine-readable medium of claim 14, wherein the database management system is a relational database management system.

20. the machine-readable medium of claim 14, including further instructions, which when process further cause the machine to:

select one or more rows of data from the initialized table, wherein selecting a row includes;

for each column of data to be selected in the row, determining if the column is to be uncompressed and decrypted; and

if the column is to be uncompressed and decrypted, retrieving a cipher text value from the table header and decrypting the value to produce the clear text representation.