Searching for encrypted data within a cloud based platform

A system, comprising:

• one or more hardware processors;
• and
• a non-transitory memory, the non-transitory memory storing instructions that, when executed by the one or more hardware processors, causes the one or more hardware processors to perform actions comprising:
• receiving an assignment of an encryption context to a role for a customer instance in a cloud computing environment, wherein the encryption context defines access to a first encrypted field by the customer instance, wherein the encryption context comprises an encryption key encrypting data in the first encrypted field;
• receiving a query request for a first search term, wherein the query request includes instructions to search the first search term using an unencrypted version of the first search term and a first encrypted value of the first search term from the first encrypted field, wherein the first encrypted value of the first search term is generated based on the encryption context and the role;
• and
• transmitting a result of the query request based on the unencrypted version of the first search term and the first encrypted value of the first search term.

A method for processing one or more query requests, the method comprising:

• receiving an assignment of an encryption context to a role for a customer instance in a cloud computing environment, wherein the encryption context defines access to a first encrypted field by the customer instance, wherein the encryption context comprises an encryption key encrypting data in the first encrypted field
• receiving a query request for a first search term and a second search term, wherein the query request includes instructions to:
• search the first search term using an unencrypted version of the first search term and a first encrypted value of the first search term from the first encrypted field, wherein the first encrypted value of the first search term is generated based on the encryption context and the role;
• and
• search the second search term using an unencrypted version of the second search term, wherein the query request omits instructions to search for a second encrypted value of the second search term based on the second search term not being associated with the first encrypted field, the encryption context, and the role;
• and
• transmitting a result of the query request based on the unencrypted version of the first search term and the first encrypted value of the first search term.

A non-transitory computer-readable medium comprising computer readable code, that when executed by one or more processors, causes the one or more processors to perform operations comprising:

• receiving an assignment of an encryption context to a role for a customer instance in a cloud computing environment, wherein the encryption context defines access to a first encrypted field by the customer instance, wherein the encryption context comprises an encryption key encrypting data in the first encrypted field;
• receiving a query request for a first search term and a second search term, wherein the query request includes instructions to:
• search the first search term using an unencrypted version of the first search term and a first encrypted value of the first search term from the first encrypted field, wherein the first encrypted value of the first search term is generated based on the encryption context and the role;
• and
• search the second search term using an unencrypted version of the second search term, wherein the query request omits instructions to search for a second encrypted value of the second search term based on the second search term not being associated with the first encrypted field, the encryption context, and the role;
• and
• transmitting a result of the query request based on the unencrypted version of the first search term and the first encrypted value of the first search term, and the unencrypted version of the second search term.