Search system

• US 9,576,005 B2
• Filed: 02/24/2016
• Issued: 02/21/2017
• Est. Priority Date: 04/09/2015
• Status: Active Grant

• Current Assignee: Hitachi Solutions Limited (Hitachi, Ltd.)
• Original Assignee: Hitachi Solutions Limited (Hitachi, Ltd.)
• Inventors: Fujimoto, Minoru, Sameshima, Yoshiki
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US15/051,808
• Publication Number:
  US 20160299924A1
• Time in Patent Office: 363 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/22 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 16/245 Query processing
• CPC Class Codes: G06F 16/2455 Query execution
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A search system includes a storage device and a search server. The storage device stores an index database storing an index encrypted with an index key and the index key encrypted with a user key and associated with the encrypted index and stores a document database storing a document encrypted with a document key and the document key encrypted with the user key and associated with the encrypted document. The search server extracts a term for search from a requested search query, decrypts the encrypted index key with a user key which belongs to a user requesting the search query, encrypts the extracted term with the decrypted index key without storing the decrypted index key in a non-transitory storage device, searches the index database with the index encrypted using the encrypted first term, and sends a search result to a terminal.

Claims

1. A search system comprising:

a storage device configured to store a document and an index which are encrypted with a searchable format; and

a search server configured to search data stored in the storage device,

wherein the storage device configured to store;

an index database storing an encrypted index, which is an index encrypted with an index key, and an encrypted index key, which is the index key encrypted with a user key, associated with the encrypted index; and

a document database storing an encrypted document, which is the document encrypted with a document key, and an encrypted document key, which is the document key encrypted with the user key, associated with the encrypted document,

wherein the search server is configured to extract a term for search from a requested search query,

decrypt the encrypted index key with a user key which belongs to a user requesting the search query,

encrypt the extracted term with the decrypted index key without storing the decrypted index key in a non-transitory storage device,

search the index database with the index encrypted using the encrypted term, and

send a search result to a terminal.

2. The search system according to claim 1,

wherein the search server is configured to extract a term from the document, which is requested to be recorded,

encrypt the term extracted from the document with the index key,

encrypt the index key with a user key which belongs to a user requesting to record the document to be recorded,

record the encrypted term extracted from the document and the encrypted index key in the index database,

encrypt the document to be recorded with the document key,

encrypt the document key with the user key which belongs to the user requesting to record the document, and

record the encrypted document and the encrypted document key in the document database.

3. The search system according to claim 1, wherein the user key is peculiar to the user or a group to which the user belongs.

4. The search system according to claim 1, further comprising a key server which manages the index key,

wherein the search server is configured to obtain the index key from the key server with a token of the user.

5. The search system according to claim 1, further comprising a key server which manages the index key,

wherein the search server is configured to request, with a token of the user, the key server to encrypt the index key with the user key.