SECURE FORMAT-PRESERVING ENCRYPTION OF DATA FIELDS

• US 20160224802A1
• Filed: 09/03/2015
• Published: 08/04/2016
• Est. Priority Date: 01/29/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Arnold, Todd W., Dayka, John C., Hart, Steven R., Jackson, Geoffrey G., Powers, Eysha S., Sweeny, James W.
• Granted Patent: US 9,858,436 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/22 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

In one embodiment, a computer-implemented method includes extracting first key derivation data from a first row of data to be stored in a database, where the database includes two or more rows of data. A first encryption subkey is generated, by a computer processor, by combining the first key derivation data with a static key. One or more sensitive fields in each row of the two or more rows of the database are encrypted using a unique corresponding encryption subkey for the row, and the first encryption subkey is unique to the first row among the two or more rows of the database. The one or more sensitive fields in the first row of data are encrypted with format-preserving encryption using the first encryption subkey. The first row of data, including the encrypted one or more sensitive fields, are stored in the database.

Claims

1. A computer-implemented method, comprising:

extracting first key derivation data from a first row of data to be stored in a database, wherein the database comprises two or more rows of data;

generating, by a computer processor, a first encryption subkey by combining the first key derivation data with a static key, wherein one or more sensitive fields in each row of the two or more rows of the database are encrypted using a unique corresponding encryption subkey for the row, and wherein the first encryption subkey is unique to the first row among the two or more rows of the database;

encrypting the one or more sensitive fields in the first row of data with format-preserving encryption using the first encryption subkey; and

storing the first row of data, comprising the encrypted one or more sensitive fields, in the database.

2. The method of claim 1, further comprising:

reading the first row of data from the database;

extracting the first key derivation data from the first row of data;

determining the first encryption subkey by combining the first key derivation data with the static key; and

decrypting the encrypted one or more sensitive fields in the first row of data using the first encryption subkey.

3. The method of claim 1, wherein the static key is used to generate the unique corresponding encryption subkey for each of the two or more rows of the database.

4. The method of claim 1, wherein key derivation data for each of the two or more rows of the database comprises a combination of a primary key of the row and a modification time of the row.

5. The method of claim 1, wherein generating the first encryption subkey by combining the first key derivation data with the static key comprises encrypting the first key derivation data with the static key.

6. The method of claim 1, wherein the first row of data excludes the static key and comprises the first key derivation data.