Patent ID: 9454673
Filing Date: 2016-09-27
CPC Classification: G06F,H04L

Claim Text:
1. A method for searchable encryption of cloud stored data, comprising: receiving a file destined for a cloud storage service; extracting a plurality of keywords from the content of the file; tokenizing each keyword of the plurality of keywords using a first algorithm comprising a hash-based message authentication code (HMAC) to generate a plurality of tokenized keywords, a tokenized keyword being generated for each keyword; appending the plurality of tokenized keywords together into a string with each tokenized keyword being separated by a separator; encrypting the file using an encryption algorithm, wherein the encryption algorithm used to encrypt the file is different from the first algorithm used to tokenize the one or more keywords; appending the string of tokenized keywords to a file header or to a tail to the encrypted file; transmitting the encrypted file with the appended string of tokenized keywords to the cloud storage service for storage, where the tokenized keywords in the string are to be indexed at the cloud storage service by the cloud storage service; receiving a search request with a search term; tokenizing the search term in the search request by applying the first algorithm to the search term to generate a tokenized search term; transmitting the search request with the tokenized search term to the cloud storage service; receiving a search result, as a result of performing a search on the cloud storage service using the index created by the cloud storage service, the search result containing a first encrypted file from the cloud storage service in response to the tokenized search term matching a tokenized keyword in a string of tokenized keyword appended to the first encrypted file being stored at the cloud storage service; decrypting the first encrypted file to generate an unencrypted file containing the search term; and providing the unencrypted file as the search result.