System, method and computer product for fast and secure data searching

• US 9,449,178 B2
• Filed: 07/24/2013
• Issued: 09/20/2016
• Est. Priority Date: 07/24/2012
• Status: Active Grant

• Current Assignee: Id Insight
• Original Assignee: Id Insight
• Inventors: Prem, Sudheer, Schraan, Matt
• Primary Examiner(s): Le, Chau
• Assistant Examiner(s): Chaudhry, Muhammad
• Application Number:
  US13/949,686
• Publication Number:
  US 20140032926A1
• Time in Patent Office: 1,154 Days
• Field of Search: 713/189
• US Class Current: 1/1
• CPC Class Codes: G06F 16/81 Indexing, e.g. XML tags; Data structures therefor; Storage structures
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A system for fast secured searching may include a user interface, a web layer configured for executing application logic and configured for interacting with a user via the user interface and configured to perform user authentication, and a database layer in communication with and accessible by the web layer and comprising a database configured for storing data, and a search engine configured for searching the database, wherein, communication to and from the database layer from and to the web layer is controlled by secure socket layer certificate authorization. The database layer may also include an inverted index in communication with the database and the search engine and configured for maintaining updated snapshots relating to the data in the database and an encryption/decryption layer for selective encryption of the data and configurable for field level, document level, and/or chunk level encryption.

Claims

1. A computer-implemented method for fast secured searching, the method comprising:

providing a computer-based user interface;

providing a web layer configured for executing application logic using computer executable instructions and configured for interacting with a user via the user interface, the web layer configured to perform user authentication using computer executable instructions; and

providing a database layer in communication with and accessible by the web layer, the database layer comprising;

a database configured for storing data as non-transitory computer readable storage media;

a search engine configured for searching the database for one or more keywords using computer executable instructions;

an inverted keyword index in communication with the database and the search engine and configured for maintaining as non-transitory computer readable storage media updated snapshots relating to the data in the database;

a selective document authorization layer for controlling real-time data access based on user credentials using computer executable instructions; and

the database layer further comprises an encryption/decryption layer configurable for field level, document level, and/or chunk level encryption, and further configured for selective compression/decompression of the data, the encryption/decryption layer comprising;

a plurality of selective encryption algorithms for encrypting the data; and

a plurality of selective compression algorithms for compressing the data;

wherein the database is configured to maintain as non-transitory computer readable storage media updated snapshots relating to the index using computer executable instructions;

wherein, communication to and from the database layer from and to the web layer is controlled by two-way secure socket layer certificate authentication over a computer network; and

wherein communication to and from the database from and to the index is controlled by two-way secure socket layer certificate authentication over a computer network.

2. The method of claim 1, wherein the document authorization layer allows a user to view a selected portion of the data on the database using computer executable instructions.

3. The method of claim 2, further comprising updating the database and the index in real-time when the user saves modifications to a document the user is authorized to modify.

4. The method of claim 1, further comprising an encryption library for storing the encryption algorithms as non-transitory computer readable media.

5. The method of claim 1, wherein the database comprises records in the form of non-transitory computer readable media, each record having one or more facets, and wherein the search engine is further configured for searching the database for records that contain or do not contain a user-specific facet using computer executable instructions.

6. A system for fast secured searching, the system comprising:

a computer-based user interface;

a web layer configured for executing application logic using computer executable instructions and configured for interacting with a user via the user interface; and

a database layer in communication with and accessible by the web layer, the database layer comprising;

a database configured for storing data as non-transitory computer readable media;

a search engine configured for searching the database for one or more keywords using computer executable instructions;

an inverted keyword index in communication with the database and the search engine and configured for maintaining as non-transitory computer readable media updated snapshots relating to the data in the database;

a selective document authorization layer for controlling real-time data access based on user credentials using computer executable instructions; and

the database layer further comprises an encryption/decryption layer configurable for field level, document level, and/or chunk level encryption, and further configured for selective compression/decompression of the data, the encryption/decryption layer comprising;

a plurality of selective encryption algorithms for encrypting the data; and

a plurality of selective compression algorithms for compressing the data;

wherein the database is configured to maintain as non-transitory computer readable storage media updated snapshots relating to the index using computer executable instructions;

wherein, communication to and from the database layer from and to the web layer is controlled by two-way secure socket layer certificate authentication over a computer network; and

wherein communication to and from the database from and to the index is controlled by two-way secure socket layer certificate authentication over a computer network.

7. The system of claim 6, further comprising an encryption library for storing the encryption algorithms as non-transitory computer readable media.

8. The system of claim 6, wherein the web layer is configured to perform user authentication using computer executable instructions.

9. The system of claim 8, wherein communication to and from the database layer from and to the web layer is controlled by two-way secure socket layer certificate authentication over a computer network.

10. The system of claim 9, wherein communication to and from the database from and to the index is controlled by two-way secure socket layer certificate authentication over a computer network.

11. The system of claim 6, wherein the document authorization layer allows a user to view a selected portion of the data on the database.

12. The system of claim 6, wherein the encryption/decryption layer comprises configurable sequencing of compression and encryption.