Patent ID: 8769302
Filing Date: 2014-07-01
Classification: G06F,H04L

Abstract:
1. A computer implemented method comprising: in response to receiving a first command that specifies first data, a first cryptographic key, and a column identifier that identifies a column of rows in a database, encrypting, by a processing device, the first data to encrypted data using the first cryptographic key and storing the encrypted data to a first row in the column in the database; in response to the receiving the first command, creating characterization data that specifies valid contents of the column of the rows; wherein the creating the characterization data further comprises: adding all of the characters from the first data that are not already present in characterization data to the characterization data and refraining from adding all of the characters from the first data that are already present in the characterization data, wherein the characterization data comprises one occurrence of each character that is present in the column of rows; if more than a threshold percentage of all possible characters are present in the characterization data, disabling the adding all of the characters from the first data that are not already present in the characterization data to the characterization data; in response to receiving a query command that specifies a second cryptographic key and the column, decrypting the column using the second key to create decrypted data; and if the decrypted data does not satisfy the valid contents specified by the characterization data, performing an invalid cryptographic key action, and; if more than a threshold number of insert commands have been received within a threshold time period, disabling the creating the characterization data.