Patent ID: 7366299
Filing Date: 2008-04-29
Classification: H04L

Abstract:
1. A computer-implemented method for encrypting and decrypting an original string that is storable in a database, the method comprising: defining a set of factors to be used for encrypting the original string; using an encryption equation to map the original string to an encrypted string, the encryption equation being a function of the original string and the set of factors; using a set of derivative equations to generate derivative values from the set of factors; storing the encrypted string and the generated derivative values in the database; providing one or more false derivatives that cannot be used to determine a given factor from the set of factors; additionally storing the one or more false derivative values in the database with the generated derivative values; using a set of factor decryption equations to map each of the generated derivative values stored in the database to a corresponding factor in the set of factors; and decrypting the encrypted string stored in the database using a decryption equation and each factor mapped through the set of factor decryption equations to generate a decrypted string that is equal to the original string, wherein a presence of the one or more false derivative values with the generated derivative values in the database prevents an attacker from knowing which of the one or more false derivative values and the generated derivative values to use with the factor decryption equation to derive the factors in the set of factors.