SYSTEM AND METHOD FOR INITIALIZING TOKENS IN A DICTIONARY ENCRYPTION SCHEME

• US 20160042187A1
• Filed: 10/23/2015
• Published: 02/11/2016
• Est. Priority Date: 03/01/2012
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Movshovitz, David
• Granted Patent: US 9,740,871 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/22 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00

Abstract

Computer systems and applications are provided for encrypting data that preserves the ability to process the encrypted data. The method includes receiving data in unencrypted form. The method further includes encrypting the data in accordance with an encryption dictionary generated by arranging the plurality of plaintext symbols in lexicographical order; defining a first subset comprising a first plurality of the lexicographically arranged symbols; defining a second subset comprising a second plurality of the lexicographically arranged symbols; defining a first set with a first plurality of unique random tokens within a first token space for use with the first plurality of symbols; and defining a second set with a second plurality of unique random tokens within a second token space for use with the second plurality of symbols such that the second plurality of unique random tokens is non-linear with respect to the first plurality of unique random tokens.

Claims

1. A computer implemented method, comprising:

receiving data in unencrypted form, the data including a plurality of plaintext symbols;

encrypting the data in accordance with an encryption dictionary generated by

arranging the plurality of plaintext symbols in lexicographical order;

defining a first subset comprising a first plurality of the lexicographically arranged symbols;

defining a second subset comprising a second plurality of the lexicographically arranged symbols;

defining a first set comprising a first plurality of unique random tokens within a first token space for use with the first plurality of symbols; and

defining a second set comprising a second plurality of unique random tokens within a second token space for use with the second plurality of symbols such that the second plurality of unique random tokens is non-linear with respect to the first plurality of unique random tokens; and

storing the encrypted data in a database.

2. The method of claim 1, wherein:

defining the first set such that the first plurality of unique random tokens within the first token space have a first linear pattern relative to one another; and

defining the second set such that the second plurality of random tokens within the second token space have a second linear pattern relative to one another.

3. The method of claim 1, wherein the plaintext symbols comprise a plaintext dictionary of words in one of the following languages:

English;

French;

German;

Italian;

Polish;

Swedish;

Dutch;

Turkish; and

Esperanto.

4. The method of claim 1, wherein:

defining the first set of random tokens comprises establishing a first average distance between tokens; and

defining the second set of random tokens comprises establishing a second average distance between tokens;

wherein the second average distance is different than the first average distance.

5. The method of claim 4, further comprising:

sorting the first set of random tokens in chronological order;

sorting the second set of random tokens in chronological order;

mapping a respective one of the first set of random tokens to a respective one of the first subset of symbols; and

mapping a respective one of the second set of random tokens to a respective one of the second subset of symbols.

6. The method of claim 4, wherein the first average distance is in the range of (2)⁰ to (2)¹⁰²⁴bits, and the second average distance is in the range of (2)⁰ to (2)¹⁰²⁴bits.

7. The method of claim 4, wherein the difference between the second average distance and the first average distance is in the range of (2)⁰ to (2)¹⁰²⁴bits.

8. The method of claim 4, wherein defining respective first and second subsets of the lexicographically arranged symbols comprises segregating the plurality of plaintext symbols based on a random coin flip event.

9. The method of claim 4, wherein:

the symbols correspond to a language having a non-linear letter frequency such that a first letter has a relatively greater frequency of occurrence than a second letter;

the first token space corresponds to the first letter;

the second token space corresponds to the second letter; and

the first token space is greater than the second token space, such that the letter frequency corresponds to the average distance for each token space.

10. The method of claim 4, further comprising:

defining a third subset of the lexicographically arranged symbols;

defining a third set of random tokens within a third token space for use with the third subset of symbols,

wherein defining the third set of random tokens comprises establishing a third average distance between tokens, and wherein the third average distance is greater than the second average distance.

11. The method of claim 1, further comprising:

adding a first random constant value to each token in the first set of random tokens; and

adding a second random constant value to each token in the second set of random tokens;

wherein the second random constant value is greater than the first random constant value.

12. The method of claim 11, further comprising:

defining a third subset of the lexicographically arranged symbols;

defining a third set of random tokens within a third token space for use with the third subset of symbols; and

adding a third random constant value to each token in the third set of random tokens;

wherein the third random constant value is different than the second random constant value.

13. In a cloud based computing environment of the type including a multitenant database maintained by a service provider, a method comprising:

receiving data in unencrypted form, the data including a plurality of plaintext symbols;

encrypting the data in accordance with an encryption dictionary generated by

alphabetically sorting the plurality of plaintext symbols;

defining a first subset comprising a first plurality of the symbols;

defining a second subset comprising a second plurality of the symbols;

defining a first set comprising a first plurality of random tokens within a first token space for use with the first subset of symbols; and

defining a second set comprising a second plurality of random tokens within a second token space for use with the second subset of symbols such that the second plurality of unique random tokens is non-linear with respect to the first plurality of unique random tokens; and

storing the encrypted data in the multitenant database.

14. The method of claim 13, wherein:

defining the first set such that the first plurality of unique random tokens within the first token space have a first linear pattern relative to one another; and

defining the second set such that the second plurality of random tokens within the second token space have a second linear pattern relative to one another.

15. The method of claim 13, wherein:

defining the first set of random tokens comprises establishing a first average distance between tokens; and

defining the second set of random tokens comprises establishing a second average distance between tokens;

wherein the second average distance is different than the first average distance.

16. The method of claim 15, wherein the first average distance is in the range of (2)⁰ to (2)¹⁰²⁴bits, and the second average distance is in the range of (2)⁰ to (2)¹⁰²⁴bits, and wherein the difference between the second average distance and the first average distance is in the range (2)⁰ to (2)¹⁰²⁴bits.

17. The method of claim 15, further comprising:

sorting the first set of random tokens in chronological order;

sorting the second set of random tokens in chronological order;

mapping a respective one of the first set of random tokens to a respective one of the first subset of symbols; and

mapping a respective one of the second set of random tokens to a respective one of the second subset of symbols.

18. The method of claim 15, further comprising:

defining a third subset of the alphabetically sorted symbols;

defining a third set of random tokens within a third token space for use with the third subset of symbols; and

adding a third random constant value to each token in the third set of random tokens;

wherein the third random constant value is different than the second random constant value, and

wherein defining the third set of random tokens comprises establishing a third average distance between tokens, and wherein the third average distance is different than the second average distance.

19. The method of claim 13, further comprising:

adding a first random constant value to each token in the first set of random tokens; and

adding a second random constant value to each token in the second set of random tokens;

wherein the second random constant value is greater than the first random constant value.

20. A computer application embodied in a non-transitory medium for operation by a computer processor for performing the steps of:

receiving data in unencrypted form, the data including a plurality of plaintext symbols;

encrypting the data in accordance with an encryption dictionary generated by

arranging the plurality of plaintext symbols in lexicographical order;

defining a first subset comprising a first plurality of the lexicographically arranged symbols;

defining a second subset comprising a second plurality of the lexicographically arranged symbols;

defining a first set comprising a first plurality of unique random tokens within a first token space for use with the first plurality of symbols; and

defining a second set comprising a second plurality of unique random tokens within a second token space for use with the second plurality of symbols such that the second plurality of unique random tokens is non-linear with respect to the first plurality of unique random tokens; and

storing the encrypted data in a database.