System and method for secure database queries

A method of performing secure computations on a protected database comprising:

• providing, in a secure processor, a database of cryptographically hashed values based on a database of cleartext, wherein the providing a database of cryptographically hashed values based on a database of cleartext values includes:
• transforming a first database of cleartext values into a second database of cryptographically hashed values wherein the elements of the first database have associated hashed elements in the second database;
• encrypting the contents of the second database and formatting the data into an encrypted datastream configured for transmission to the secure processor;
• providing the encrypted datastream to the input of the secure processor;
• decrypting the encrypted datastream within the secure processor;
• and
• storing the results of the decryption in a third database located within the secure processor thereby producing a replica of the second database of cryptographically hashed values within the secure processor;
• receiving a cryptographically hashed query value as input into the secure processor wherein the query value is a hash of a cleartext value that corresponds to a cleartext query;
• performing a comparison operation within the secure processor to determine the presence of the hashed query value or any of a set of associated hashed query values within the database of cryptographically hashed values;
• and
• providing the results of the comparison operation to an external interface of the secure processor, wherein the contents of the database of cryptographically hashed values and the comparison operation are encapsulated within the secure processor and unexposed externally therefrom.

A non-transitory computer readable medium comprising instructions for performing secure computations on a protected database, by:

• providing, in a secure processor, a database of cryptographically hashed values based on a database of cleartext values;
• receiving a plurality of cryptographically hashed query values as input into the secure processor, wherein the plurality of cryptographically hashed query values are hashes formed from a cleartext query and variations of the cleartext query;
• performing a comparison operation within the secure processor to determine the presence of one or more of the plurality of received hashed query values or any of a set of associated hashed query values within the database of cryptographically hashed values;
• and
• providing the results of the comparison operation to an external interface of the secure processor, wherein the contents of the database of cryptographically hashed values and the comparison operation are encapsulated within the secure processor and unexposed externally therefrom.

A non-transitory computer readable medium comprising instructions for performing secure computations on a protected database, by:

• providing, in a secure processor, a database of cryptographically hashed values based on a database of cleartext values;
• in which the providing a database of cryptographically hashed values based on a database of cleartext values includes:
• transforming a first database of cleartext values into a second database of cryptographically hashed values wherein the elements of the first database have associated hashed elements in the second database;
• encrypting the contents of the second database and formatting the data into an encrypted datastream configured for transmission to the secure processor;
• providing the encrypted datastream to the input of the secure processor;
• decrypting the encrypted datastream within the secure processor;
• and
• storing the results of the decryption in a third database located within the secure processor thereby producing a replica of the second database of cryptographically hashed values within the secure processor;
• receiving a cryptographically hashed query value as input into the secure processor wherein the query value is a hash of a cleartext value that corresponds to a cleartext query;
• performing a comparison operation within the secure processor to determine the presence of the hashed query value or any of a set of associated hashed query values within the database of cryptographically hashed values;
• and
• providing the results of the comparison operation to an external interface of the secure processor, wherein the contents of the database of cryptographically hashed values and the comparison operation are encapsulated within the secure processor and unexposed externally therefrom.

A system for performing secure computations on a protected database, comprising:

• a first secure processor that includes a memory and a processor, wherein the memory includes instructions, executed by the processor, for:
• transforming a database of cleartext values into a database of cryptographically hashed values wherein the elements of the database of cleartext values have associated hashed elements in the database of cryptographically hashed values;
• receiving a plurality of cryptographically hashed query values as input into the secure processor, wherein the plurality of cryptographically hashed query values are hashes formed from a cleartext query and variations of the cleartext query;
• performing a comparison operation within the secure processor to determine the presence of one or more of the plurality of received hashed query values or any of a set of associated hashed query values within the database of cryptographically hashed values;
• and
• providing the results of the comparison operation to an external interface of the second secure processor, wherein the contents of the database of cryptographically hashed values and the comparison operation are encapsulated within the second secure processor and unexposed externally therefrom.

A method of performing secure computations on a protected database comprising:

• providing, in a secure processor, a database of cryptographically hashed values based on a database of cleartext values;
• receiving a cleartext query of the database of cryptographically hashed values;
• cryptographically hashing the cleartext query to create a plurality of hashed query values wherein the plurality of cryptographically hashed query values are hashes formed from the cleartext query and variations of the cleartext query;
• performing a comparison operation within the secure processor to determine the presence of one or more of the plurality of received hashed query values or any of a set of associated hashed query values within the database of cryptographically hashed values;
• and
• providing the results of the comparison operation to an external interface of the secure processor, wherein the contents of the database of cryptographically hashed values and the comparison operation are encapsulated within the secure processor and unexposed externally therefrom.