The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 17, 2017

Filed:

Dec. 24, 2014
Applicants:

Isabelle Hang, Karlsruhe, DE;

Florian Kerschbaum, Karlsruhe, DE;

Martin Haerterich, Wiesloch, DE;

Mathias Kohler, Stutensee, DE;

Andreas Schaad, Bruchsal, DE;

Axel Schroepfer, Rheinstetten, DE;

Walter Tighzert, Heidelberg, DE;

Inventors:

Isabelle Hang, Karlsruhe, DE;

Florian Kerschbaum, Karlsruhe, DE;

Martin Haerterich, Wiesloch, DE;

Mathias Kohler, Stutensee, DE;

Andreas Schaad, Bruchsal, DE;

Axel Schroepfer, Rheinstetten, DE;

Walter Tighzert, Heidelberg, DE;

Assignee:

SAP SE, Walldorf, DE;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/00 (2013.01); G06F 17/30 (2006.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
G06F 17/30867 (2013.01); G06F 17/30433 (2013.01); G06F 17/30528 (2013.01); G06F 17/30554 (2013.01); H04L 63/0428 (2013.01); H04L 63/101 (2013.01);
Abstract

Methods, systems, and computer-readable storage media for enforcing access control in encrypted query processing. Implementations include actions of obtaining a set of user groups based on the user credential and a user group mapping, obtaining a set of relations based on the query, obtaining a set of virtual relations based on the set of user groups and the set of relations, receiving a first rewritten query based on the set of virtual relations and a query rewriting operation, encrypting the first rewritten query to provide an encrypted query, and transmitting the encrypted query to at least one server computing device over a network for execution of the encrypted query over access controlled, encrypted data.


Find Patent Forward Citations

Loading…