Non-invasive encryption for relational database management systems
AssigneeDATAllegro, Inc.
InventorsStuart Frost, David Salch
Life of this patent
Estimating the term…
Abstract
A secure relational database system is provided which utilizes a non-invasive encryption technique. Data pages stored or retrieved by a relational database management system are diverted to a multi-channel hardware encryption engine for processing. Each data page is divided into multiple buffers and distributed among the channels of the hardware encryption engine to be processed simultaneously. The data page is then reassembled and passed on to its intended destination.
Claims25
A method for encrypting data pages stored by a relational database management system in a data storage system, the method comprising the steps of:
- dividing a data page designated for storage into a plurality of buffers;
- presenting the plurality of buffers to a hardware encryption engine to be encrypted concurrently;
- storing the data page in a data storage system after the hardware encryption engine has completed encryption of the plurality of buffers,
- wherein the hardware encryption engine reassembles the data page with the plurality of encrypted buffers.
A secure relational database system for storing data of a relational database in an encrypted form, the system comprising:
- a computer server having a processor, a memory and a data storage system;
- an operating system, for execution by the processor in the computer server, for managing the processor, the memory and the data storage system of the computer server;
- a hardware encryption engine;
- a relational database management system, for execution by the processor in the computer server, for managing a relational database stored in the data storage system;
- means for diverting a data page written by the relational database management system to the operating system for storage in the data storage system to the hardware encryption engine to be encrypted prior to storing the data page in the data storage system;
- and
- means for diverting a data page read by the relational database management system from the data storage system to the hardware encryption engine to be decrypted prior to the relational database management system receiving the data page.
A secure relational database system for storing data of a relational database in an encrypted form, the system comprising:
- a computer server having a processor, a memory and a data storage system;
- an operating system, for execution by the processor in the computer server, for managing the processor, the memory and the data storage system;
- a hardware encryption engine;
- a relational database management system, for execution by the processor in the computer server, for managing a relational database stored in the data storage system,
- wherein, prior to calling a write function of the operating system to store a data page in the data storage system, the relational database management system is configured to divide the data page into a plurality of buffers and present the plurality of buffers to the hardware encryption engine to be encrypted concurrently, wherein the hardware encryption engine reassembles the data page with the plurality of encrypted buffers.
Computer-executable program code stored on a computer-readable medium, the computer-executable program code for encrypting data pages stored by a relational database management system in a data storage system, the computer-executable program code comprising:
- code to divide a data page designated for storage into a plurality of buffers;
- code to present the plurality of buffers to a hardware encryption engine to be encrypted concurrently;
- code to store the data page in a data storage system after the hardware encryption engine has completed encryption of the plurality of buffers,
- wherein the hardware encryption engine reassembles the data page with the plurality of encrypted buffers.
Dependencies are inferred from the claim text.