System, method and computer product for fast and secure data searching

Abstract

A system for fast secured searching may include a user interface, a web layer configured for executing application logic and configured for interacting with a user via the user interface and configured to perform user authentication, and a database layer in communication with and accessible by the web layer and comprising a database configured for storing data, and a search engine configured for searching the database, wherein, communication to and from the database layer from and to the web layer is controlled by secure socket layer certificate authorization. The database layer may also include an inverted index in communication with the database and the search engine and configured for maintaining updated snapshots relating to the data in the database and an encryption/decryption layer for selective encryption of the data and configurable for field level, document level, and/or chunk level encryption.

What is claimed is: 
     
         1 . A system for fast secured searching, the system comprising:
 a user interface;   a web layer configured for executing application logic and configured for interacting with a user via the user interface, the web layer configured to perform user authentication; and   a database layer in communication with and accessible by the web layer, the database layer comprising:
 a database configured for storing data; and 
 a search engine configured for searching the database; 
   wherein, communication to and from the database layer from and to the web layer is controlled by secure socket layer certificate authorization.   
     
     
         2 . The system of  claim 1 , wherein the database layer further comprises an index in communication with the database and the search engine and configured for maintaining updated snapshots relating to the data in the database. 
     
     
         3 . The system of  claim 2 , wherein communication to and from the database from and to the index is controlled by secure socket layer certificate authorization. 
     
     
         4 . The system of  claim 1 , wherein the database layer further comprises a document authorization layer for controlling data access based on user credentials. 
     
     
         5 . The system of  claim 4 , wherein the document authorization layer allows a user to view a selected portion of the data on the database. 
     
     
         6 . The system of  claim 1 , wherein database layer further comprises an encryption/decryption layer for selective encryption of the data. 
     
     
         7 . The system of  claim 6 , wherein the encryption/decryption layer is configurable for field level, document level, and/or chunk level encryption. 
     
     
         8 . The system of  claim 7 , wherein the encryption/decryption layer is further configured for selective compression/decompression of the data. 
     
     
         9 . The system of  claim 6 , wherein the encryption/decryption layer comprises a plurality of selective encryption algorithms for encrypting the data. 
     
     
         10 . The system of  claim 9 , further comprising an encryption library for storing the encryption algorithms. 
     
     
         11 . A system for fast secured searching, the system comprising:
 a user interface;   a web layer configured for executing application logic and configured for interacting with a user via the user interface; and   a database layer in communication with and accessible by the web layer, the database layer comprising:
 a database configured for storing data; 
 a search engine configured for searching the database; 
 an inverted index in communication with the database and the search engine and configured for maintaining updated snapshots relating to the data in the database; and 
 an encryption/decryption layer for selective encryption of the data and configurable for field level, document level, and/or chunk level encryption. 
   
     
     
         12 . The system of  claim 11 , wherein the encryption/decryption layer is further configured for selective compression/decompression of the data. 
     
     
         13 . The system of  claim 11 , wherein the encryption/decryption layer comprises a plurality of selective encryption algorithms for encrypting the data. 
     
     
         14 . The system of  claim 13 , further comprising an encryption library for storing the encryption algorithms. 
     
     
         15 . The system of  claim 11 , wherein the web layer is configured to perform user authentication. 
     
     
         16 . The system of  claim 15 , wherein communication to and from the database layer from and to the web layer is controlled by secure socket layer certificate authorization. 
     
     
         17 . The system of  claim 16 , wherein communication to and from the database from and to the index is controlled by secure socket layer certificate authorization. 
     
     
         18 . The system of  claim 11 , wherein the database layer further comprises a document authorization layer for controlling data access based on user credentials. 
     
     
         19 . The system of  claim 18 , wherein the document authorization layer allows a user to view a selected portion of the data on the database. 
     
     
         20 . A system for fast secured searching, the system comprising:
 a web layer comprising:
 a user accessible web server, wherein the user logs-in to and is authenticated by the system in order to perform searches and receive results; 
 an application server communicably coupled to the web server, wherein the application server authenticates the user's log-in information; and 
   a database layer communicably coupled to the web layer, the database layer comprising:
 a search server including computer-executable instructions to perform searches of data based on a user's search query and authorization level; 
 an inverted index communicably coupled to the search server, the index containing encrypted data; and 
 a database containing encrypted data communicably coupled to the index, 
   wherein the index takes a snapshot of the data stored in the database,   wherein the system requires SSL certificate authorization to access the database layer from the web layer, and wherein the system also requires SSL certificate authorization to send data from the database layer to the web layer.