SYSTEM, METHOD AND COMPUTER PRODUCT FOR FAST AND SECURE DATA SEARCHING

• US 20170004325A1
• Filed: 09/19/2016
• Published: 01/05/2017
• Est. Priority Date: 07/24/2012
• Status: Active Grant

• Current Assignee: Insight ID, Inc.
• Original Assignee: Id Insight
• Inventors: Prem, Sudheer, Schraan, Matt
• Granted Patent: US 11,106,815 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/81 Indexing, e.g. XML tags; Data structures therefor; Storage structures
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A system for fast secured searching may include a user interface, a web layer configured for executing application logic and configured for interacting with a user via the user interface and configured to perform user authentication, and a database layer in communication with and accessible by the web layer and comprising a database configured for storing data, and a search engine configured for searching the database, wherein, communication to and from the database layer from and to the web layer is controlled by secure socket layer certificate authorization. The database layer may also include an inverted index in communication with the database and the search engine and configured for maintaining updated snapshots relating to the data in the database and an encryption/decryption layer for selective encryption of the data and configurable for field level, document level, and/or chunk level encryption.

Claims

1. A system for fast secured searching, the system comprising:

a user interface;

a web layer configured for executing application logic and configured for interacting with a user via the user interface, the web layer configured to perform user authentication; and

a database layer in communication with and accessible by the web layer, the database layer comprising;

a database configured for storing data; and

a search engine configured for searching the database;

wherein, communication to and from the database layer from and to the web layer is controlled by secure socket layer certificate authorization.

2. The system of claim 1, wherein the database layer further comprises an index in communication with the database and the search engine and configured for maintaining updated snapshots relating to the data in the database.

3. The system of claim 2, wherein communication to and from the database from and to the index is controlled by secure socket layer certificate authorization.

4. The system of claim 1, wherein the database layer further comprises a document authorization layer for controlling data access based on user credentials.

5. The system of claim 4, wherein the document authorization layer allows a user to view a selected portion of the data on the database.

6. The system of claim 1, wherein database layer further comprises an encryption/decryption layer for selective encryption of the data.

7. The system of claim 6, wherein the encryption/decryption layer is configurable for field level, document level, and/or chunk level encryption.

8. The system of claim 7, wherein the encryption/decryption layer is further configured for selective compression/decompression of the data.

9. The system of claim 6, wherein the encryption/decryption layer comprises a plurality of selective encryption algorithms for encrypting the data.

10. The system of claim 9, further comprising an encryption library for storing the encryption algorithms.

11. A system for fast secured searching, the system comprising:

a user interface;

a web layer configured for executing application logic and configured for interacting with a user via the user interface; and

a database layer in communication with and accessible by the web layer, the database layer comprising;

a database configured for storing data;

a search engine configured for searching the database;

an inverted index in communication with the database and the search engine and configured for maintaining updated snapshots relating to the data in the database; and

an encryption/decryption layer for selective encryption of the data and configurable for field level, document level, and/or chunk level encryption.

12. The system of claim 11, wherein the encryption/decryption layer is further configured for selective compression/decompression of the data.

13. The system of claim 11, wherein the encryption/decryption layer comprises a plurality of selective encryption algorithms for encrypting the data.

14. The system of claim 13, further comprising an encryption library for storing the encryption algorithms.

15. The system of claim 11, wherein the web layer is configured to perform user authentication.

16. The system of claim 15, wherein communication to and from the database layer from and to the web layer is controlled by secure socket layer certificate authorization.

17. The system of claim 16, wherein communication to and from the database from and to the index is controlled by secure socket layer certificate authorization.

18. The system of claim 11, wherein the database layer further comprises a document authorization layer for controlling data access based on user credentials.

19. The system of claim 18, wherein the document authorization layer allows a user to view a selected portion of the data on the database.

20. A system for fast secured searching, the system comprising:

a web layer comprising;

a user accessible web server, wherein the user logs-in to and is authenticated by the system in order to perform searches and receive results;

an application server communicably coupled to the web server, wherein the application server authenticates the user'"'"'s log-in information; and

a database layer communicably coupled to the web layer, the database layer comprising;

a search server including computer-executable instructions to perform searches of data based on a user'"'"'s search query and authorization level;

an inverted index communicably coupled to the search server, the index containing encrypted data; and

a database containing encrypted data communicably coupled to the index,

wherein the index takes a snapshot of the data stored in the database,

wherein the system requires SSL certificate authorization to access the database layer from the web layer, and wherein the system also requires SSL certificate authorization to send data from the database layer to the web layer.