Computer-implemented system and method for protecting sensitive data via data re-encryption
AssigneePalo Alto Research Center Incorporated
InventorsVanishree Rao, Shantanu Rane, Ersin Uzun, Alejandro E. Brito
Life of this patent
Estimating the term…
Abstract
A computer-implemented method for protecting sensitive data via data re-encryption is provided. Encrypted data is maintained. A data query is received from a user associated with a public key and a secret key. Results of the query are computed by identifying at least a portion of the encrypted data and by adding plaintext for the identified portion of the encrypted data as the results. A re-encryption key is generated for the results using the public key of the user and the results are re-encrypted using the re-encryption key. The re-encrypted results are then transmitted to the user.
Claims20
A computer-implemented system for protecting sensitive data via data re-encryption, comprising:
- a database to maintain encrypted data, wherein the encrypted data comprises a property of supporting additions of plaintext underlying the encrypted data;
- a server comprising a central processing unit, memory, an input port, and an output port, wherein the central processing unit is configured to generate a re-encryption key for the encrypted data using a public key of one of a plurality of users;
- and
- a further server comprising a central processing unit, memory, an input port to receive at least a portion of the encrypted data from the database and the re-encryption key from the server, and an output port, wherein the central processing unit is configured to:
- re-encrypt the portion of encrypted data using the re-encryption key;
- and
- transmit the re-encrypted data to the user.
A computer-implemented method for protecting sensitive data via data re-encryption, comprising:
- maintaining encrypted data, wherein the encrypted data comprises a property of supporting additions of plaintext underlying the encrypted data;
- generating a re-encryption key for the encrypted data using a public key of one of a plurality of users;
- and
- re-encrypting at least a portion of the encrypted data using the re-encryption key;
- and
- transmitting the re-encrypted data to the user.
Dependencies are inferred from the claim text.