Intermediate server, database query processing method and program
AssigneeNEC Corporation
InventorKengo MORI
Life of this patent
Estimating the term…
Abstract
To make it possible to prevent leakage of sensitive information from a database without using a server having both secure operation management and a high database operation processing capability. An intermediate server includes: a cryptography processing unit that encrypts or decrypts data stored in a database; a query conversion unit that converts a query to the database into a first query that does not need processing by the cryptography processing unit and a second query that needs the processing by the cryptography processing unit; and a query processing unit that sends the first query to a database server connected to the database to acquire a result from the database server, and executes the second query using the cryptography processing unit.
Claims18
An intermediate server comprising:
- a cryptography processing unit that encrypts or decrypts data stored in a database;
- a query conversion unit that converts a query to the database into a first query that does not need processing by the cryptography processing unit and a second query that needs the processing by the cryptography processing unit;
- and
- a query processing unit that sends the first query to a database server connected to the database to acquire a result from the database server, and executes the second query using the cryptography processing unit.
A database query processing method executed by a computer, comprising:
- converting a query to a database into a first query that does not need encryption processing and decryption processing and a second query that needs the encryption processing or the decryption processing;
- sending the first query to a database server connected to the database to acquire a result from the database server;
- and
- executing the second query using the encryption processing or the decryption processing.
A non-transitory computer readable medium that stores therein a program causing a computer to executes processing for:
- converting a query to a database into a first query that does not need encryption processing and decryption processing and a second query that needs the encryption processing or the decryption processing;
- sending the first query to a database server connected to the database to acquire a result from the database server;
- and
- executing the second query using the encryption processing or the decryption processing.
Dependencies are inferred from the claim text.