SYSTEM, APPARATUS AND METHOD FOR ENCRYPTION AND DECRYPTION OF DATA TRANSMITTED OVER A NETWORK

• US 20110167255A1
• Filed: 12/30/2010
• Published: 07/07/2011
• Est. Priority Date: 09/15/2008
• Status: Active Grant

• Current Assignee: Vaultive Ltd.
• Original Assignee: Vaultive Ltd.
• Inventors: MATZKEL, Ben, Lahav, Aviad, Tal, Maayan
• Granted Patent: US 9,338,139 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: G06F 15/16 Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs coordinating program control therefor G06F9/52; in regulating and control system G05B
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/066 Format adaptation, e.g. format conversion or compression
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/226 Delivery according to priorities
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and system for securing data transmitted between a client device and a server by obtaining input text at an intermediate module, processing the input text to obtain processed text, and transmitting the processed text to the server. Embodiments of the invention include securing data between a client device and a server by processing the input text at the intermediate module by applying an order-preserving transformation, the order-preserving transformation comprising: generating order information based on the input text, the order information indicative of a relative order of the input text within a set of possible input texts according to a collation rule.

Claims

1. A method for securing data between a client device and a server comprising:

obtaining input text at an intermediate module;

processing the input text at said intermediate module by applying an order-preserving transformation, said order-preserving transformation comprising;

generating order information based on said input text, said order information indicative of a relative order of the input text within a set of possible input texts according to a collation rule; and

transforming the input text to obtain processed text; and

transmitting the processed text to the server.

2. The method of claim 1, further comprising transmitting the order information to the server in association with said processed input text by adding the order information as a prefix to the processed input data and transmitting the combined order information and processed input data to the server.

3. The method of claim 1, wherein said order information is produced based on a truncated version of the input text.

4. The method of claim 3, wherein said order information is produced based on a plurality of truncated words in the input text, in the order in which they appear therein.

5. The method of claim 1, wherein generating said order information comprises applying an order-preserving, secret-key-dependent function on the input text.

6. The method of claim 5, wherein the order-preserving function employs a numerical monotonously increasing function, and wherein applying said order-preserving function comprises:

obtaining an input numeric value based on at least a portion of the input text;

providing an input range and an output range;

dividing the input and output ranges into two input ranges and two output ranges based on a secret key;

selecting a pair of input and output ranges from the divided ranges according to which of the input ranges includes the input numeric value;

iteratively repeating the dividing and selecting steps until the output range is smaller than a predetermined parameter, said output range being a final output range; and

returning an output numeric value lying within the final output range.

7. A system for securing data between a client device and a server comprising:

an intermediate module configured to;

obtain input text;

process the input text by applying an order-preserving transformation, said order-preserving transformation comprising;

generating order information based on said input text, said order information indicative of a relative order of the input text within a set of possible input texts according to a collation rule; and

transforming the input text to obtain processed text; and

transmit the processed text to the server.

8. The system of claim 7, wherein said intermediate module is to transmit the order information to the server in association with said processed input text by:

adding the order information as a prefix to the processed input data, and

transmitting the combined order information and processed input data to the server.

9. The system of claim 7, wherein said intermediate module is to generate said order information based on a truncated version of the input text.

10. The system of claim 9, wherein said intermediate module is to generate said order information based on a plurality of truncated words in the input text, in the order in which they appear therein.

11. The system of claim 7, wherein said intermediate module is to generate said order information by applying an order-preserving, secret-key-dependent function on the input text.

12. The system of claim 11, wherein the order-preserving function employs a numerical monotonously increasing function, and wherein said intermediate module is to apply said order-preserving function by:

obtaining an input numeric value based on at least a portion of the input text;

providing an input range and an output range;

dividing the input and output ranges into two input ranges and two output ranges based on a secret key;

selecting a pair of input and output ranges from the divided ranges according to which of the input ranges includes the input numeric value;

iteratively repeating the dividing and selecting steps until the output range is smaller than a predetermined parameter, said output range being a final output range; and

returning an output numeric value lying within the final output range.