Visa International Service Association

Adam Conway

Avinash Kalgi

Sue Zhu

Mark Cordell

Galina Skoptsova

A database management tool performs updates or sequential operations to large databases. A configuration file specifies source, destination (if different than source), encryption status, order, throttling limits, and number of threads to maintain, among other settings. A queue table points the tool at the database to be converted and maintains current row ID and status. The queue table may also hold the location of a hardware security module (HSM) if one is used for encryption, decryption, or hashing. The database management tool may use the configuration file to retrieve a record, perform the specified action, such as sending the record to an HSM for decryption with an old key and encryption with a new key, and replacing the old record with the updated record. The queue table may be updated with a running record of where the last operation occurred to allow rollbacks if necessary.

Crytography data management

A method of loading project data comprising identifying project files with a project ID. The method includes determining a secondary project file is referenced in a primary project file. The method includes loading the project ID of the secondary and primary project files into a reference table. The primary project file project ID and the secondary project file project ID referenced in the respective primary project file are associated with one another in the reference table. The method includes receiving a query for the primary project files referencing a queried secondary project file. The method includes determining the project IDs of the primary project files in the reference associated with the project ID of the queried secondary project file. The method includes providing a results table including the primary project file project IDs associated with the queried secondary project file project ID in the reference table.

Systems and methods for loading project data

Techniques are provided to allow full search for encrypted data within a database. In some embodiments, searchable data may be separated into different searchable tables in a database in such a way that encrypted data is stored as plaintext but has no usable link to other data within the source database. In some embodiments, performing a query on a particular user data may result in the retrieval of an encrypted identifier, which may then be decrypted via an encryption module. A second search based on the decrypted identifier may produce a set of relevant search results from a source table.

Increasing search ability of private, encrypted data

The solution herein describes a software module that works in combination with certain hardware (e.g., a particular chipset) to obtain the level of security provided by an HSM. The software module can be implemented on a commodity server. The software module can utilize an HSM or key custodian to obtain cryptographic keys. The cryptographic keys may be stored on the commodity server within a secure memory space managed by the commodity server's chip set. While stored, access to the cryptographic keys may be managed by the chip set. The chip set can ensure that only protected applications associated with the cryptographic keys may access said keys.

Cryptographic services utilizing commodity hardware

Systems, apparatuses and methods for preventing requests to access a system's resources from having a negative impact on higher priority data processing operations being performed by the system. The invention is directed to preventing the number of calls made by a merchant's applications through an application programming interface (API) for access to the lower priority services of a merchant service provider from having a negative impact on the ability of the service provider to perform the processing necessary to support higher priority services. The invention provides a user interface that may be used by a merchant or the service provider to configure the operation of a 'throttle' that is designed to generate an alert when the number of calls by a merchant application for access to a specific service provider function or application exceeds a value or limit, where exceeding the value or limit may indicate a malfunction of the merchant's application or an attack by a malicious agent.

Growing community of inventors

Snoqualmie, WA, United States of America

Adam Conway