Encryption directed database management system and method

A non-transitory computer-readable medium containing instructions that cause hardware logic to perform operations for user registration in a database, comprising, by the hardware logic:

• storing a password of a user;
• storing a public key and an encrypted private key of the user within an encryption key table,
• wherein the private key is encrypted by using the password of the user as a key for the encryption;
• and
• if the user has a predetermined authorization, generating a higher category key and storing the higher category key, in encrypted form, in a portion of the encryption key table corresponding to the user,
• wherein the higher category key is encrypted with the public key of the user;
• and
• wherein the higher category key enables the user having the predetermined authorization to access the database.

A non-transitory computer-readable medium containing instructions that cause hardware logic to perform operations relating to a grantor user granting, to a grantee user, access to a database, comprising, by the hardware logic:

• decrypting a private key of the grantor user with a password of the grantor user;
• decrypting a higher category key with the decrypted private key of the grantor user;
• generating a type key by hashing the decrypted higher category key and a type identifier identifying a type of instances of the database;
• and
• storing the type key, in encrypted form, in a portion of an encryption key table corresponding to the grantee user,
• wherein the stored type key is encrypted with a public key of the grantee user.

A non-transitory computer-readable medium containing instructions that cause hardware logic to perform operations relating to a grantor user granting access, to a grantee user, to a database, comprising, by the hardware logic:

• decrypting a private key of the grantor user with a password of the grantor user;
• decrypting a particular key with the private key of the grantor user;
• if the particular key is a higher category key:
• generating a type key by hashing the decrypted higher category key and a type identifier identifying a type of instances of the database, and
• generating an instance key by hashing the type key and an instance identifier identifying a particular instance of the instances of the database;
• if the particular key is the type key, generating the instance key by the type key and the instance identifier;
• and
• storing the instance key, in encrypted form, in a portion of an encryption key table corresponding to the grantee user,
• wherein the stored instance key is encrypted with a public key of the grantee user.

A encryption database management system, comprising:

• memory configured to store data in instances of a database, wherein different subsets of the instances are associated with different types based on the data stored in the instances, and wherein each instance has an instance identifier identifying the instance and each type has a type identifier identifying the type;
• and
• hardware logic configured to:
• obtain a higher category key,
• generate a type key by utilizing the higher category key and a type identifier of a type, wherein the type is for administration of individual instances of the database, and
• generate an instance key by utilizing the type key and an instance identifier of an instance, wherein the instance is associated with the type, and
• use the instance key to encrypt and decrypt data stored in the instance.

A encryption database management system, comprising:

• memory configured to store data in instances of a database, wherein different subsets of the instances are associated with different types based on the data stored in the instances, and wherein each instance has an instance identifier identifying the instance and each type has a type identifier identifying the type;
• and
• hardware logic configured to:
• store a password of a user;
• store a public key and an encrypted private key of the user within an encryption key table, wherein the private key is encrypted by using the password of the user as a key for the encryption;
• and
• if the user has a predetermined authorization, generate a higher category key and store the higher category key, in encrypted form, in the encryption key table,
• wherein the higher category key is encrypted with the public key of the user, and
• wherein the higher category key enables the user having the predetermined authorization to access the database.

A encryption database management system, comprising:

• memory configured to store data in instances of a database, wherein different subsets of the instances are associated with different types based on the data stored in the instances, and wherein each instance has an instance identifier identifying the instance and each type has a type identifier identifying the type;
• and
• hardware logic configured to:
• decrypt a private key of a grantor user of the database with a password of the grantor user;
• decrypt a higher category key with the decrypted private key of the grantor user;
• generate a type key by utilizing the decrypted higher category key and a type identifier identifying a type of an instance of the database,
• store the type key, in encrypted form, in a portion of an encryption key table corresponding to a grantee user, wherein the stored type key is encrypted with a public key of the grantee user.

A encryption database management system, comprising:

• memory configured to store data in instances of a database, wherein different subsets of the instances are associated with different types based on the data stored in the instances, and wherein each instance has an instance identifier identifying the instance and each type has a type identifier identifying the type;
• and
• hardware logic configured to:
• decrypt a private key of a grantor user of the database with a password of the grantor user;
• decrypt a particular key with the private key of the grantor user;
• if the particular key is a higher category key:
• generate a type key by utilizing the decrypted higher category key and a type identifier identifying a type of the instances of the database, and
• generate an instance key by utilizing the type key and an instance identifier identifying a particular instance of the instances of the database;
• if the particular key is the type key, generate the instance key for the particular instance by utilizing the type key and the instance identifier;
• store the instance key, in encrypted form, in a portion of an encryption key table corresponding to the grantee user, wherein the stored instance key is encrypted with a public key of the grantee user.