Patent ID: 7606795
Filing Date: 2009-10-20
Classification: G06F,Y10S

Abstract:
1. A processor-implemented method for verifying the integrity and completeness of query results, comprising: receiving a data record in computer random access memory, and ingesting a data record in a data repository and entering the data record into a storage system comprising an index including index segments; computing a secure one-way hash within the data repository and outside of a trusted domain for the data record based on data record content; sending the hash to a certification agent comprising a secret private key, a public key and a logic for generating cryptographic signatures within the trusted domain; requesting the certification agent to sign the hash along with a timestamp using the secret private key to create a data verification object for the data record; requesting the certification agent to generate index verification objects for index segments in the index, wherein the index verification objects comprise a secure one-way hash of an index page and a timestamp signed by the certification agent; receiving a query from a query client including a verification agent; executing the query using the index to search for the data record satisfying the query; retrieving the data record satisfying the received query and the associated data verification objects generated by the certification agent; identifying and retrieving index segments and their index verification objects associated with the data record satisfying the query during the execution of the query; transmitting to a verification agent a query output comprising the retrieved data records, the data verification objects, the identified indexed segments, the generated index verification objects and the query; executing the query in the query output and retrieving the data record satisfying the query; verifying whether the data record was created at a time specified by the timestamp; verifying the completeness of the query result by verifying the identified index segments with the retrieved index verification objects; identifying migrated data and verifying the correctness and completeness of the migrated data by requiring additional verification including a signed Merkle tree root; verifying the integrity of data objects by verifying the retrieved data records with corresponding retrieved data verification objects in the verification agent by referencing a public key of the certification agent; and implementing batch processing for batches of data records comprising: