Methods And Systems For Securing And Retrieving Sensitive Data Using lndexable Databases

A method of retrieving sensitive information that is secured at rest, including:

• receiving a query with a search value for an indexed sensitive field of metadata that is stored in an encrypted format on a remote database server that does not have access to a decryption key for the encrypted sensitive field;
• hashing at least part of the search value to a non-reversible hash value prior to querying the remote database server;
• querying the remote database server using the non-reversible hash value;
• receiving network event metadata responsive to the query, including an encrypted value of the indexed sensitive field subject to the query, clear text values of one or more metadata fields, and an additional encrypted value of a sensitive field that is either indexed or not indexed;
• and
• decrypting at least the network event metadata responsive to the query.

A method of responding to a query for sensitive information that is secured at rest, including:

• receiving at a database server a query with a search value for an indexed sensitive field of metadata that is stored in an encrypted format on the database server, without the database server having access to a decryption key for the encrypted sensitive field;
• wherein at least part of the search value is a non-reversible hash value of at least part of the indexed sensitive field;
• responding to the query, using an index of non-reversible hash values for the indexed sensitive field, including returning an encrypted value of the indexed sensitive field subject to the query, clear text values of one or more metadata fields, and an additional encrypted value of an additional sensitive field that is either indexed or not indexed;
• and
• whereby a querying entity that has access to the decryption key, can decrypt the indexed sensitive field.

A tangible non-transitory computer readable storage media, including program instructions loaded into memory that, when executed on processors, cause the processors to implement a process that includes:

• identifying sensitive fields of metadata for network events for encryption and identifying indexable sensitive fields, among the sensitive fields, for hashing;
• hashing at least partial values in the indexable sensitive fields to non-reversible hash values and concatenating the non-reversible hash values with the metadata for the network events;
• encrypting the sensitive fields of metadata;
• and
• sending the metadata for the network events, with the non-reversible hash values and the encrypted sensitive fields, to a remote database server that does not have access to a decryption key for the encrypted sensitive fields and causing the remote database server to index the non-reversible hash values for indexed retrieval against the indexable sensitive fields.

A tangible non-transitory computer readable storage media, including program instructions loaded into memory that, when executed on processors, cause the processors to implement a process that includes:

• receiving a query with a search value for an indexed sensitive field of network event metadata that is stored in an encrypted format on a remote database server that does not have access to a decryption key for the encrypted sensitive field;
• hashing at least part of the search value to a non-reversible hash value prior to querying the remote database server;
• querying the remote database server using the non-reversible hash value;
• receiving network event metadata responsive to the query, including an encrypted value of the indexed sensitive field subject to the query, clear text values of one or more metadata fields, and an additional encrypted value of a sensitive field that is either indexed or not indexed;
• and
• decrypting at least the network event metadata responsive to the query.

A tangible non-transitory computer readable storage media, including program instructions loaded into memory that, when executed on processors, cause the processors to implement a process that includes:

• receiving at a database server a query with a search value for an indexed sensitive field of metadata that is stored in an encrypted format on the database server, without the database server having access to a decryption key for the encrypted sensitive field;
• wherein at least part of the search value is a non-reversible hash value of at least part of the indexed sensitive field;
• responding to the query, using an index of non-reversible hash values for the indexed sensitive field, including returning an encrypted value of the indexed sensitive field subject to the query, clear text values of one or more metadata fields, and an additional encrypted value of an additional sensitive field that is either indexed or not indexed;
• and
• whereby a querying entity that has access to the decryption key can decrypt the indexed sensitive field.