Developer information platform MongoDB has introduced the final availability of queryable encryption, an end-to-end information encryption expertise for securing delicate software workflows. It’s designed to cut back the danger of information publicity for organizations and helps companies defend delicate info when it’s queried/in-use on MongoDB.
MongoDB’s queryable encryption can be utilized with AWS Key Administration Service, Microsoft Azure Key Vault, Google Cloud Key Administration Service, and different providers compliant with the important thing administration interoperability protocol (KMIP) to handle cryptographic keys, the corporate stated.
Common availability consists of help for equality queries, with extra question varieties (e.g., vary, prefix, suffix, and substring) accessible in upcoming releases, the agency added. MongoDB first launched a preview model of queryable encryption at MongoDB World final yr.
Queryable encryption supplies the potential to cut back the assault floor for confidential information in a number of use circumstances. Knowledge stays encrypted at insert, storage, and question, with each queries and their responses encrypted over the wire and randomized for resistance to frequency evaluation. Nevertheless, there’s a value to house and time necessities for queries involving encrypted fields.
Customers choose fields to encrypt primarily based on information sensitivity
With the final availability of queryable encryption, prospects can safe delicate workloads to be used circumstances in extremely regulated or data-sensitive industries reminiscent of monetary providers, well being care, authorities, and important infrastructure by encrypting information whereas it’s being processed and in use, MongoDB stated in a press launch. Customers can choose the fields in MongoDB databases that include delicate information that should be encrypted.
For instance, a licensed software end-user at a monetary providers firm may have to question information utilizing a buyer’s financial savings account quantity. When configured with MongoDB queryable encryption, the content material of the question and the information within the financial savings account subject will stay encrypted when touring over the community, whereas it’s saved within the database, and whereas the question processes the information to retrieve related info, in keeping with the agency.