Abstract: A system (108) for securing a database including a first and second tables is provided, where the first table includes a first key field and a first data field and the second table includes a second key field and a second data field. The first and second key fields specifying first and second key field entries having one common entry. The system (108) can replace the first key field entries with first adjusted key field entries based on first initialization vectors. The system (108) also replaces the second key field entries with second adjusted key field entries based on second initialization vectors different from the first initialization vectors. The system further encodes the first and the second adjusted key field entries based on index keys to generate an encrypted database. In the encrypted database, a value of the common entries in the first and second tables are different.

Abstract: A method is provided for re-initializing a cryptographic processing module (102) at a location designated as an unclassified environment. The method includes storing in a database (122) a module unique recovery vector (310, 510) assigned to a cryptographic processing module. The method also includes indexing the module unique recovery vector in the database using a unique module identifying code (for example, a serial number) assigned to the cryptographic processing module. The method further includes subsequently communicating the module unique recovery vector from the database, over a computer network (120), to a remote computing environment (400) that is unclassified. The module unique recovery vector is used to re-initialize the cryptographic processing module.

Abstract: A system (108) for securing a database including a first and second tables is provided, where the first table includes a first key field and a first data field and the second table includes a second key field and a second data field. The first and second key fields specifying first and second key field entries having one common entry. The system (108) can replace the first key field entries with first adjusted key field entries based on first initialization vectors. The system (108) also replaces the second key field entries with second adjusted key field entries based on second initialization vectors different from the first initialization vectors. The system further encodes the first and the second adjusted key field entries based on index keys to generate an encrypted database. In the encrypted database, a value of the common entries in the first and second tables are different.

Abstract: A method is provided for re-initializing a cryptographic processing module (102) at a location designated as an unclassified environment. The method includes storing in a database (122) a module unique recovery vector (310, 510) assigned to a cryptographic processing module. The method also includes indexing the module unique recovery vector in the database using a unique module identifying code (for example, a serial number) assigned to the cryptographic processing module. The method further includes sugsequently communicating the module unique recovery vector from the database, over a computer network (120), to a remote comupting environment (400) that is unclassified. The module unique recovery vector is used to re-initialize the cryptographic processing module.