Back to results
US 8,276,206 B2Granted
Systems and methods for partial matching searches of encrypted retained data
AssigneeTelefonaktiebolaget LM Ericsson (publ)
InventorsMaurizio La Rocca, Amedeo Imbimbo
Life of this patent
Estimating the term…
Abstract
Systems and methods are provided for encryption allowing partial matching searches to retrieve data that is retained in a database. A user identification number or other characteristic is stored in unencrypted form such that a wildcard search may be performed to retrieve one or more encrypted indexes associated with the unencrypted user identification. These encrypted indexes are then unencrypted by use of a key to determined their associated unencrypted index and corresponding targeted retained data. The targeted retained data may then be accessed by an authorized entity such as a law enforcement agency.
Claims20
A method of retrieving targeted retained data, the method implemented by a system which comprises a receiver, a processor, a transmitter and a database, the method comprising the steps of:
- receiving, by the receiver, a request to access targeted retained data associated with a targeted user, the request including partial search matching criteria associated with the targeted user;
- accessing, by the processor, a first table in the database, the first table including a plain column having unencrypted identification data associated with a plurality of users, and the first table including an encrypted index column having an encrypted index associated with each of the plurality of users;
- selecting, by the processor, from the first table at least one encrypted index that matches the partial search matching criteria;
- accessing, by the processor, a second table in the database, the second table including a plain index column having unencrypted index associated with each of the plurality of users, and the second table including a retained data column having a plurality of retained data including the targeted retained data;
- selecting, by the processor, from the second table at least one unencrypted index associated with the at least one selected encrypted index;
- identifying, by the processor, the targeted retained data in the column of retained data, where the targeted retained data associated with the at least one selected unencrypted index;
- and,
- retrieving, by the processor, the targeted retained data from the database.
5 more elements
A system for retrieving targeted retained data from a database, comprising:
- a receiver associated with a processor for receiving a request to access targeted retained data associated with a targeted user, the request including partial search matching criteria associated with the targeted user;
- the processor configured to access a first table in the database, the first table including a plain column having unencrypted identification data associated with a plurality of users, and the first table including an encrypted index column having an encrypted index associated with each of the plurality of users;
- the processor configured to select from the first table at least one encrypted index that matches the partial search matching criteria;
- the processor configured to access a second table in the database, the second table including a plain index column having unencrypted index associated with each of the plurality of users, and the second table including a retained data column having a plurality of retained data that includes the targeted retained data;
- the processor configured to select from the second table at least one unencrypted index associated with the at least one selected encrypted index;
- the processor configured to identify, in the column of retained data, the targeted retained data associated with the at least one selected unencrypted index;
- and,
- the processor configured to retrieve the targeted retained data from the database.
5 more elements
An article of manufacture comprising a non-transitory program storage medium having computer readable program code embodied therein for retrieving targeted retained data from a database, the computer readable program code in the article of manufacture comprising:
- computer readable program code for causing a computer to receive a request to access targeted retained data associated with a targeted user, the request including partial search matching criteria associated with the targeted user;
- computer readable program code for causing the computer to access a first table in the database, the first table including a plain column having unencrypted identification data associated with a plurality of users, and the first table including an encrypted index column having an encrypted index associated with each of the plurality of users;
- computer readable program code for causing the computer to select from the first table at least one encrypted index that matches the partial search matching criteria;
- computer readable program code for causing the computer to access a second table in the database, the second table including a plain index column having unencrypted index associated with each of the plurality of users, and the second table including a retained data column having a plurality of retained data including the targeted retained data;
- computer readable program code for causing the computer to select from the second table at least one unencrypted index associated with the at least one selected encrypted index;
- computer readable program code for causing the computer to identify, in the column of retained data, the targeted retained data associated with the at least one selected unencrypted index;
- and,
- computer readable program code for causing the computer to retrieve the targeted retained data from the database.
5 more elements
A system for retrieving targeted retained data from a database, comprising:
- means for receiving a request to access targeted retained data associated with a targeted user, the request including partial search matching criteria associated with the targeted user;
- means for accessing a first table in the database, the first table including a plain column having unencrypted identification data associated with a plurality of users, and the first table including an encrypted index column having an encrypted index associated with each of the plurality of users;
- means for selecting from the first table at least one encrypted index that matches the partial search matching criteria;
- means for accessing a second table in the database, the second table including a plain index column having unencrypted index associated with each of the plurality of users, and the second table including a retained data column having a plurality of retained data including the targeted retained data;
- means for selecting from the second table at least one unencrypted index associated with the at least one selected encrypted index;
- means for identifying, in the column of retained data, the targeted retained data associated with the at least one selected unencrypted index;
- and,
- means for retrieving the targeted retained data from the database.
5 more elements
A method for enabling an authorized law enforcement agency to retrieve targeted retained telecommunication data that was obtained from a telecommunications network, the method implemented by a system which comprises a receiver, a processor, a transmitter and a database, the method comprising the steps of:
- receiving, by the receiver, data associated with electronic communications that took place over the telecommunications network;
- storing, at the database, the received data associated with the electronic communications that took place over the telecommunications network;
- receiving, by the receiver, a request from the authorized law enforcement agent to access targeted retained telecommunication data associated with a targeted user, the targeted retained telecommunication data is stored in the database, the request including partial search matching criteria associated with the targeted user;
- accessing, by the processor, a first table in the database, the first table including a plain column having unencrypted identification data associated with a plurality of users, and the first table including an encrypted index column having an encrypted index associated with each of the plurality of users;
- selecting, by the processor, from the first table at least one encrypted index that matches the partial search matching criteria;
- accessing, by the processor, a second table in the database, the second table including a plain index column having unencrypted index associated with each of the plurality of users, and the second table including a retained data column having a plurality of retained data that includes the targeted retained data;
- selecting, by the processor, from the second table at least one unencrypted index associated with the at least one selected encrypted index;
- identifying, by the processor, the targeted retained data in the column of retained data, where the targeted retained data associated with the at least one selected unencrypted index;
- retrieving, by the processor, the targeted retained data from the database;
- and
- transmitting, by the transmitter, the targeted retained data to the authorized law enforcement agent.
8 more elements
A system used by an authorized law enforcement agency for retrieving targeted retained telecommunication data that was obtained from a telecommunications network, the system comprising:
- a receiver configured to receive data associated with electronic communications that took place over the telecommunications network;
- a database configured to store the received data associated with the electronic communications that took place over the telecommunications network;
- the receiver configured to receive a request from the authorized law enforcement agent to access targeted retained telecommunication data associated with a targeted user, the targeted retained telecommunication data is stored in the database, the request including partial search matching criteria associated with the targeted user;
- a processor configured to access a first table in the database, the first table including a plain column having unencrypted identification data associated with a plurality of users, and the first table including an encrypted index column having an encrypted index associated with each of the plurality of users;
- the processor configured to select from the first table at least one encrypted index that matches the partial search matching criteria;
- the processor configured to access a second table in the database, the second table including a plain index column having unencrypted index associated with each of the plurality of users, and the second table including a retained data column having a plurality of retained data that includes the targeted retained data;
- the processor configured to select from the second table at least one unencrypted index associated with the at least one selected encrypted index;
- the processor configured to identify, in the column of retained data, the targeted retained data associated with the at least one selected unencrypted index;
- the processor configured to retrieve the targeted retained data from the database;
- and
- a transmitter configured to transmit the targeted retained data to the authorized law enforcement agent.
8 more elements
Dependencies are inferred from the claim text.