Encrypting intermediate data under group-level encryption
AssigneeSap SE
InventorsDirk Thomsen, Till Merker
Life of this patent
Estimating the term…
Abstract
Computer-readable media, methods, and systems are disclosed for handling intermediate data in connection with a database employing group-level encryption. Intermediate data is used during database operation and stored transiently such that the intermediate data is removed from memory upon database restart. To protect the privacy of the intermediate data, a random encryption key may be generated upon startup of a database instance. The random encryption key may be stored transiently. During database operation, the random encryption key may be used to encrypt and/or decrypt the intermediate data. The transient memory may be wiped upon database shut down such that the random encryption key is no longer accessible upon database restart.
Claims20
One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor, perform a method for handling intermediate data in connection with a database employing group-level encryption, the method comprising:
- upon startup of an instance of the database, generating a random encryption key;
- storing the random encryption key in transient memory;
- receiving a set of intermediate data, the set of intermediate data comprising data associated with a plurality of encryption groups associated with the database,
- wherein an encryption group of the plurality of encryption groups comprises a unique encryption key for encrypting data;
- performing an encryption operation on the set of intermediate data using the random encryption key;
- receiving a request to shut down the database;
- and
- responsive to receiving the request to shut down the database, wiping the transient memory.
A method for method for handling intermediate data in connection with a database employing group-level encryption, the method comprising:
- upon startup of an instance of the database, generating a random encryption key;
- storing the random encryption key in transient memory;
- receiving a set of intermediate data, the set of intermediate data comprising data associated with a plurality of encryption groups associated with the database,
- wherein an encryption group of the plurality of encryption groups comprises a unique encryption key for encrypting data;
- performing an encryption operation on the set of intermediate data using the random encryption key;
- receiving a request to shut down the database;
- and
- responsive to receiving the request to shut down the database, wiping the transient memory.
A system for handling intermediate data in connection with a database employing group-level encryption, the system comprising:
- at least one processor;
- and at least one non-transitory memory storing computer executable instructions that when executed by the at least one processor cause the system to carry out actions comprising:
- upon startup of an instance of the database, generating a random encryption key;
- storing the random encryption key in transient memory;
- receiving a set of intermediate data, the set of intermediate data comprising data associated with a plurality of encryption groups associated with the database,
- wherein an encryption group of the plurality of encryption groups comprises a unique encryption key for encrypting data;
- performing an encryption operation on the set of intermediate data using the random encryption key;
- receiving a request to shut down the database;
- and
- responsive to receiving the request to shut down the database, wiping the transient memory.
Dependencies are inferred from the claim text.