Computer program product and method for order preserving symbol based encryption

• US 9,100,183 B2
• Filed: 04/03/2013
• Issued: 08/04/2015
• Est. Priority Date: 02/23/2010
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Movshovitz, David
• Primary Examiner(s): HOFFMAN, BRANDON S
• Application Number:
  US13/855,761
• Publication Number:
  US 20140126718A1
• Time in Patent Office: 853 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/0618 Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807

Abstract

A method for processing symbols by a first computerized entity, the method may include receiving, by a first computerized entity and over a communication network, text that comprises multiple random tokens and a plurality of plaintext symbols; wherein the multiple random tokens are generated by a second computerized entity; wherein a value of each random token that represents a plaintext symbol is responsive to values of random tokens that represents plaintext symbols that have a lower lexicographic value than the plaintext symbol; and processing the text by the first computerized entity.

Claims

1. A method for processing symbols by a first computerized entity, the method comprising:

receiving, by a first computerized entity and over a communication network, encrypted text that comprises multiple random tokens and a plurality of plaintext symbols;

wherein the multiple random tokens are generated by a second computerized entity;

wherein a value of each random token that represents a plaintext symbol is responsive to values of random tokens that represents plaintext symbols that have a lower lexicographic value than the plaintext symbol; and

processing the encrypted text by the first computerized entity, wherein the processing is selected from a group consisting of sorting and searching.

2. The method according to claim 1, wherein the first computerized entity supports a software as a service application.

3. The method according to claim 1, wherein the first computerized entity supports a data base application.

4. A non-transitory computer readable medium that stores instructions for:

receiving, by a first computerized entity and over a communication network, encrypted text that comprises multiple random tokens and a plurality of plaintext symbols;

wherein the multiple random tokens are generated by a second computerized entity;

wherein a value of each random token that represents a plaintext symbol is responsive to values of random tokens that represents plaintext symbols that have a lower lexicographic value than the plaintext symbol; and

processing the encrypted text by the first computerized entity, wherein the processing is selected from a group consisting of sorting and searching.

5. The non-transitory computer readable medium according to claim 4 wherein the first computerized entity supports a software as a service application.

6. The non-transitory computer readable medium according to claim 4 wherein the first computerized entity supports a data base application.

7. A system, comprising a first computerized entity for:

receiving over a communication network, encrypted text that comprises multiple random tokens and a plurality of plaintext symbols;

wherein the multiple random tokens are generated by a second computerized entity;

wherein a value of each random token that represents a plaintext symbol is responsive to values of random tokens that represents plaintext symbols that have a lower lexicographic value than the plaintext symbol; and

processing the encrypted text by the first computerized entity, wherein the processing is selected from a group consisting of sorting and searching.

8. The system according to claim 7 wherein the first computerized entity supports a software as a service application.

9. The system according to claim 7 wherein the first computerized entity supports a data base application.