Secure lookup

• US 9,054,872 B2
• Filed: 09/09/2013
• Issued: 06/09/2015
• Est. Priority Date: 06/18/2010
• Status: Expired due to Fees

• Current Assignee: Axis Technology Software LLC
• Original Assignee: Axis Technology Software LLC
• Inventors: Taskaya, Ilker, Nauda, Alex
• Primary Examiner(s): POWERS, WILLIAM S
• Application Number:
  US14/021,369
• Publication Number:
  US 20140032928A1
• Time in Patent Office: 638 Days
• Field of Search: 713/167, 726/27
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/04 Masking or blinding
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

A method for secure data transformation and lookup is executed by a computer system. A data value to create an encrypted value is encrypted by the computer system. A hash value based on the encrypted value is generated by the computer system. A modulo operation is performed by the computer system on the hash value to create a modulo value. A transformed value from a lookup table is retrieved by the computer system by using the modulo value as an index for the look up table. The transformed value is provided by the computer system.

Claims

1. A method, executed on a computer system, for secure data transformation and lookup comprising:

encrypting, by the computer system, a data value to create an encrypted value;

generating, by the computer system, a hash value based on the encrypted value;

performing, by the computer system, a modulo operation on the hash value to create a modulo value;

retrieving, by the computer system, a transformed value from a lookup table by using the modulo value as an index for the look up table; and

providing, by the computer system, the transformed value.

2. The method of claim 1 wherein the data value is encrypted using an AES algorithm.

3. The method of claim 1 wherein the modulo operation is modulo 100.

4. The method of claim 1 wherein the hash value is generated using an MD5 algorithm.

5. The method of claim 1 wherein the transformed value in the lookup table is set by a user.

6. The method of claim 1, further comprising:

receiving, by the computer system, the data value from a first database; and

storing, by the computer system, the transformed value to a second database.

7. A system for secure data transformation and lookup comprising:

a look up table comprising transformed values, each with a corresponding index;

a processor, configured to;

receive a data value to be transformed;

encrypt the data value to create an encrypted value;

generate a hash value based on the encrypted value;

perform a modulo operation on the hash value to create a modulo value;

retrieve, from the lookup table, a transformed value by using the modulo value as the index; and

providing the transformed value.

8. The system of claim 7 wherein the processor is further configured to encrypt the data value using an AES algorithm.

9. The system of claim 7 wherein the processor is further configured to use a modulo 100 operation as the modulo operation.

10. The system of claim 7 wherein the processor is further configured generate the hash value by using an MD5 algorithm.

11. The system of claim 7 wherein the transformed value in the lookup table is set by a user.

12. The system of claim 7, wherein the processor is further configured to:

receive the data value from a first database; and

store the transformed value to a second database.

13. A computer program product, tangibly embodied in a non-transitory computer-readable storage medium, for secure data transformation and lookup, the computer program product including instructions operable to cause a processor to:

encrypt a data value to create an encrypted value;

generate a hash value based on the encrypted value;

perform a modulo operation on the hash value to create a modulo value;

retrieve a transformed value from a lookup table by using the modulo value as an index for the look up table; and

provide the transformed value.

14. The computer program product of claim 13 wherein the instructions are further operable to cause the processor to encrypt the data value using an AES algorithm.

15. The computer program product of claim 13 wherein the instructions are further operable to cause the processor to perform the modulo operation using a modulo 100 operation.

16. The computer program product of claim 13 wherein the instructions are further operable to cause the processor to generate the hash value using an MD5 algorithm.

17. The computer program product of claim 13 wherein the transformed value in the lookup table is set by a user.

18. The computer program product of claim 13, further comprising instructions operable to cause a processor to:

receive the data value from a first database; and

store the transformed value to a second database.

19. A method, executed on a computer system, for secure data transformation and lookup comprising:

retrieving, by the computer system, a data value from a production database;

encrypting, by the computer system, the data value to create an encrypted value;

generating, by the computer system, a hash value based on the encrypted value;

performing, by the computer system, a modulo operation on the hash value to create a modulo value;

retrieving, by the computer system, a lookup table from a memory;

retrieving, by the computer system, a transformed value from the lookup table by using the modulo value as an index for the look up table; and

transmitting, by the computer system, the transformed value to a non-production computer system.