Secure database access through partial encryption

• US 7,418,600 B2
• Filed: 03/13/2003
• Issued: 08/26/2008
• Est. Priority Date: 03/13/2003
• Status: Active Grant

• Current Assignee: Workday Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Dettinger, Richard D., Stevens, Richard J., Will, Eric W., Kulack, Frederick A.
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Lipman; Jacob
• Application Number:
  US10/388,074
• Publication Number:
  US 20040181679A1
• Time in Patent Office: 1,993 Days
• Field of Search: 713/193
• US Class Current: 713/193
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

The present invention generally is directed to systems, methods, and articles of manufacture for securing sensitive information involved in database transactions. Embodiments of the present invention selectively encrypt only portions of transactions involving sensitive data, thereby reducing or eliminating the processing overhead resulting from wastefully encrypting non-sensitive data. The sensitive data may be identified by a document. The document may be accessed by a requesting entity to determine which portions of a query should be encrypted prior to sending the query to a database server over a network. The document may also be accessed by a database server to determine which portions of query results should be encrypted prior to sending the query results to the requesting entity over the network.

Claims

1. A method for conducting a secure database transaction, comprising:

receiving a query from a requesting entity, wherein the query was processed by an encryption algorithm configured to selectively encrypt conditions of the query depending on whether the query conditions contained an identified sensitive field;

issuing the query against a database;

receiving results in response to issuing the query;

determining whether the results include data corresponding to one or more sensitive fields;

if so, encrypting the data corresponding to the one or more sensitive fields; and

sending the query results to the requesting entity; and

prior to issuing the query against the database;

determining if the query comprises any encrypted conditions; and

if so, decrypting the encrypted conditions.

2. The method of claim 1, wherein determining whether the results includes data corresponding to one or more sensitive fields comprises accessing a document identifying one or more fields as sensitive.

3. The method of claim 2, wherein the document is an XML document.

4. The method of claim 2, wherein:

the document contains abstract representations of physical fields of the database; and

issuing the query against a database comprises mapping, based on the abstract representations, logical fields contained in the query to physical fields of the database.