Back to results
US 2022/0067193 A1Published application
Systems and methods of multi-key encryption for multi-tenant database
AssigneeAuction.com, LLC
InventorsRavi Singh, Bin Xu, Shuangli Cao
Life of this patent
Estimating the term…
Abstract
A method for data isolation in a multi-tenant environment includes a vault API that is programmed to generate a key ID corresponding to a client ID associated with received entity data and pass an encryption request to a separate computer system that generates a data key to encrypt the entity data. The encrypted data is then returned to the vault API that then stores the encrypted data in a client collection associated with the client ID.
Claims9
A method for data isolation in multi-tenant environments, comprising:
- receiving, by a vault API, an encryption request comprising a client ID associated with a client, an entity name, an entity ID and entity data;
- generating, by the vault API, a key ID corresponding to the client ID;
- issuing, by the vault API and to a cloud-based computer system, an encryption request comprising the generated key ID and the entity data;
- generating, by the cloud-based computer system, a data key based on the key ID, wherein the data key is associated with the entity data;
- encrypting, by the cloud-based computer system, the entity data by using the data key;
- transmitting, by the cloud-based computer system and to the vault API, the encrypted data;
- and
- storing, by the vault API, the encrypted data and key ID in a client collection within a vault database, wherein the client collection is associated with the client ID.
5 more elements
A system for data isolation in multi-tenant environments, comprising:
- an online data vault system storing a plurality of client collections corresponding to a plurality of clients, wherein each of the client collections including a plurality of encrypted entity data sets, the online data vault system programmed to:
- receive a search request comprising a query that includes an identifier;
- retrieve a subset of the plurality of encrypted data sets from the plurality of client collections, the subset including encrypted data sets corresponding to the query that match the identifier;
- provide the subset of encrypted data sets and the key IDs corresponding to the encrypted data sets to a cloud-based computer system;
- receive the decrypted subset of data sets from the cloud-based computer system;
- and
- cause a client-side module to present the decrypted plurality of data sets;
- and
- the cloud-based computer system, programmed to:
- receive, from the online data vault system, the subset of encrypted data sets and corresponding key IDs;
- decrypt the received subset of encrypted data sets using the respective data key of each of the obtained subset of encrypted data sets based on the key IDs;
- and
- provide the decrypted subset of the data sets to the online data vault system.
10 more elements
Dependencies are inferred from the claim text.