System and method of dynamic, encrypted searching

• US 9,594,827 B2
• Filed: 12/31/2015
• Issued: 03/14/2017
• Est. Priority Date: 02/24/2014
• Status: Active Grant

• Current Assignee: Entefy Inc.
• Original Assignee: Entefy Inc.
• Inventors: Ghafourifar, Alston, Greenberg, Philip Nathan, Ghafourifar, Mehdi
• Primary Examiner(s): MOSER, BRUCE M
• Application Number:
  US14/985,907
• Publication Number:
  US 20160179938A1
• Time in Patent Office: 439 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 16/148 File search processing
• CPC Class Codes: G06F 16/2228 Indexing structures
• CPC Class Codes: G06F 16/313 Selection or weighting of terms for indexing
• CPC Class Codes: G06F 16/334 Query execution G06F16/335 takes precedence
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 51/066 Format adaptation, e.g. format conversion or compression
• CPC Class Codes: H04L 51/216 Handling conversation history, e.g. grouping of messages in sessions or threads
• CPC Class Codes: H04L 51/56 Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
• CPC Class Codes: H04M 3/5175 Call or contact centers supervision arrangements

Abstract

This disclosure relates to personalized and dynamic server-side searching techniques for encrypted data. Current so-called ‘zero-knowledge’ privacy systems (i.e., systems where the server has ‘zero-knowledge’ about the client data that it is storing) utilize servers that hold encrypted data without the decryption keys necessary to decrypt, index, and/or re-encrypt the data. As such, the servers are not able to perform any kind of meaningful server-side search process, as it would require access to the underlying decrypted data. Therefore, such prior art ‘zero-knowledge’ privacy systems provide a limited ability for a user to search through a large dataset of encrypted documents to find critical information. Disclosed herein are communications systems that offer the increased security and privacy of client-side encryption to content owners, while still providing for highly relevant server-side search-based results via the use of content correlation, predictive analysis, and augmented semantic tag clouds for the indexing of encrypted data.

Claims

1. A non-transitory computer readable medium comprising computer executable instructions stored thereon to cause one or more processing units of a processing device to:

obtain a first plurality of unencrypted documents, wherein each document in the first plurality of unencrypted documents comprises;

a Small Index of tags based, at least in part, on a content of the respective document; and

a Large Index of tags based, at least in part, on a predictive analysis of the tags in the Small Index of the respective document;

obtain a second encrypted document, wherein the second encrypted document comprises a Small Index of tags based, at least in part, on a content of the second encrypted document;

create one or more associations between the second encrypted document and one or more documents of the first plurality of unencrypted documents based, at least in part, on the Small Index of tags of the second encrypted document and the respective Small Index of tags of the one or more of the first plurality of unencrypted documents;

generate a Large Index of tags for the second encrypted document based, at least in part, on a predictive analysis of the tags in the Small Index of tags of the second encrypted document;

augment the Large Index of tags for the second encrypted document based, at least in part, on the respective Large Index of tags for the one or more associated documents of the first plurality of unencrypted documents;

receive a query from a first user, wherein the query matches at least one tag in the augmented Large Index of tags for the second encrypted document; and

generate a result set of documents in response to the received query, wherein the result set comprises the second encrypted document.

2. The non-transitory computer readable medium of claim 1, wherein the first plurality of unencrypted documents are each owned by the first user.

3. The non-transitory computer readable medium of claim 1, wherein the instructions to augment the Large Index of tags for the second encrypted document further comprise instructions to:

add at least one of the tags from the Large Index of tags of at least one of the one or more associated documents into the Large Index of tags of the second unencrypted document.

4. The non-transitory computer readable medium of claim 1, wherein the instructions to augment the Large Index of tags for the second encrypted document further comprise instructions to:

link the Large Index of tags of at least one of the one or more associated documents with the Large Index of tags of the second unencrypted document.

5. The non-transitory computer readable medium of claim 1, wherein the Small Index of tags for the second encrypted document comprises a user-customized index of tags.

6. The non-transitory computer readable medium of claim 1, wherein the instructions to create one or more associations between the second encrypted document and one or more documents of the first plurality of unencrypted documents further comprise instructions to use at least one of the following:

a Markovian data model;

neural networks;

deep learning techniques; and

semantic language training techniques.

7. The non-transitory computer readable medium of claim 1, further comprising instructions to:

augment the Small Index of tags for the second encrypted document based, at least in part, on the respective Small Index of tags for the one or more associated documents of the first plurality of unencrypted documents.

8. The non-transitory computer readable medium of claim 1, wherein the processing device does not have the ability to decrypt the second encrypted document.

9. The non-transitory computer readable medium of claim 1, wherein the instructions to create one or more associations between the second encrypted document and one or more documents of the first plurality of unencrypted documents further comprise instructions to base the created associations, at least in part, on metadata of the second encrypted document and metadata of the one or more documents of the first plurality of unencrypted documents.

10. The non-transitory computer readable medium of claim 1, further comprising instructions to:

obtain an updated version of the second encrypted document, wherein the updated version of the second encrypted document comprises an updated Small Index of tags based, at least in part, on the updated content of the updated version of the second encrypted document.

11. A system, comprising:

a memory; and

one or more processing units, communicatively coupled to the memory, wherein the memory stores instructions to configure the one or more processing units to;

obtain a first plurality of unencrypted documents, wherein each document in the first plurality of unencrypted documents comprises;

a Small Index of tags based, at least in part, on a content of the respective document; and

a Large Index of tags based, at least in part, on a predictive analysis of the tags in the Small Index of the respective document;

obtain a second encrypted document, wherein the second encrypted document comprises a Small Index of tags based, at least in part, on a content of the second encrypted document;

create one or more associations between the second encrypted document and one or more documents of the first plurality of unencrypted documents based, at least in part, on the Small Index of tags of the second encrypted document and the respective Small Index of tags of the one or more of the first plurality of unencrypted documents;

generate a Large Index of tags for the second encrypted document based, at least in part, on a predictive analysis of the tags in the Small Index of tags of the second encrypted document;

augment the Large Index of tags for the second encrypted document based, at least in part, on the respective Large Index of tags for the one or more associated documents of the first plurality of unencrypted documents;

receive a query from a first user, wherein the query matches at least one tag in the augmented Large Index of tags for the second encrypted document; and

generate a result set of documents in response to the received query, wherein the result set comprises the second encrypted document.

12. The system of claim 11, wherein the first plurality of unencrypted documents are each owned by the first user.

13. The system of claim 11, wherein the instructions to augment the Large Index of tags for the second encrypted document further comprise instructions to:

add at least one of the tags from the Large Index of tags of at least one of the one or more associated documents into the Large Index of tags of the second unencrypted document.

14. The system of claim 11, wherein the instructions to augment the Large Index of tags for the second encrypted document further comprise instructions to:

link the Large Index of tags of at least one of the one or more associated documents with the Large Index of tags of the second unencrypted document.

15. The system of claim 11, wherein the Small Index of tags for the second encrypted document comprises a user-customized index of tags.

16. The system of claim 11, wherein the instructions to create one or more associations between the second encrypted document and one or more documents of the first plurality of unencrypted documents further comprise instructions to use at least one of the following:

a Markovian data model;

neural networks;

deep learning techniques; and

semantic language training techniques.

17. The system of claim 11, wherein the instructions further comprise instructions to cause the one or more processing units to:

augment the Small Index of tags for the second encrypted document based, at least in part, on the respective Small Index of tags for the one or more associated documents of the first plurality of unencrypted documents.

18. The system of claim 11, wherein the system does not have the ability to decrypt the second encrypted document.

19. The system of claim 11, wherein the instructions to create one or more associations between the second encrypted document and one or more documents of the first plurality of unencrypted documents further comprise instructions to base the created associations, at least in part, on metadata of the second encrypted document and metadata of the one or more documents of the first plurality of unencrypted documents.

20. The system of claim 11, wherein the instructions further comprise instructions to cause the one or more processing units to:

obtain an updated version of the second encrypted document, wherein the updated version of the second encrypted document comprises an updated Small Index of tags based, at least in part, on the updated content of the updated version of the second encrypted document.

21. A computer-implemented method, comprising:

obtaining a first plurality of unencrypted documents, wherein each document in the first plurality of unencrypted documents comprises;

a Small Index of tags based, at least in part, on a content of the respective document; and

a Large Index of tags based, at least in part, on a predictive analysis of the tags in the Small Index of the respective document;

obtaining a second encrypted document, wherein the second encrypted document comprises a Small Index of tags based, at least in part, on a content of the second encrypted document;

creating one or more associations between the second encrypted document and one or more documents of the first plurality of unencrypted documents based, at least in part, on the Small Index of tags of the second encrypted document and the respective Small Index of tags of the one or more of the first plurality of unencrypted documents;

generating a Large Index of tags for the second encrypted document based, at least in part, on a predictive analysis of the tags in the Small Index of tags of the second encrypted document;

augmenting the Large Index of tags for the second encrypted document based, at least in part, on the respective Large Index of tags for the one or more associated documents of the first plurality of unencrypted documents;

receiving a query from a first user, wherein the query matches at least one tag in the augmented Large Index of tags for the second encrypted document; and

generating a result set of documents in response to the received query, wherein the result set comprises the second encrypted document.

22. The method of claim 21, wherein the first plurality of unencrypted documents are each owned by the first user.

23. The method of claim 21, wherein augmenting the Large Index of tags for the second encrypted document further comprises adding at least one of the tags from the Large Index of tags of at least one of the one or more associated documents into the Large Index of tags of the second unencrypted document.

24. The method of claim 21, wherein augmenting the Large Index of tags for the second encrypted document further comprises linking the Large Index of tags of at least one of the one or more associated documents with the Large Index of tags of the second unencrypted document.

25. The method of claim 21, further comprising:

augmenting the Small Index of tags for the second encrypted document based, at least in part, on the respective Small Index of tags for the one or more associated documents of the first plurality of unencrypted documents.