Abstract: Polymorphic encryption is described to protect data in a vault. In one example, a method includes associating operations with at least a portion of the fields of a data set to form a plurality of operation field combinations, attaching an encryption scheme to each operation field combination, to enable the attached operation on values in the field when the values are encrypted without decrypting the values, associating a role with at least one operation field combination, encrypting the values in the at least a portion of the plurality of different fields in accordance with the attached encryption scheme, and providing access through the role to perform an operation that is associated with the role on a stored encrypted value in a field that is associated with an operation field combination that is associated with the role.

Abstract: Polymorphic encryption is described in a way to restrict access and enhance security of a secure data access system. In one example, a data vault has a first copy of a value being encrypted according to a first encryption scheme to enable a first operation on the first copy when the first copy is encrypted without decrypting the first copy and a second copy being encrypted according to a second encryption scheme. A governance layer has at least a first policy configured to enable the first operation, the governance layer configured to permit the first operation for an authenticated user. An interface layer has roles supporting a selected policy, the interface layer further comprising a user interface to receive user credentials, to link the credentials to a role and to send an authentication of the user and the role to the governance layer.

Abstract: Polymorphic encryption is described in a way to restrict access and enhance security of a data vault. In an example, the data vault has a primary partition with a first subset of records having an encrypted value for each of at least a portion of the fields encrypted according to a first encryption scheme. A secondary partition has a second subset of the records encrypted according to a second encryption scheme that is different from the first encryption scheme. The first encryption scheme is configured to permit a first set of operations on the values when the values are encrypted and the second encryption scheme is configured to permit a second set of operations on the values when the values are encrypted.

Abstract: Polymorphic encryption is described in a way to restrict access and enhance security of a data vault. In an example, the data vault has a primary partition with a first subset of records having an encrypted value for each of at least a portion of the fields encrypted according to a first encryption scheme. A secondary partition has a second subset of the records encrypted according to a second encryption scheme that is different from the first encryption scheme. The first encryption scheme is configured to permit a first set of operations on the values when the values are encrypted and the second encryption scheme is configured to permit a second set of operations on the values when the values are encrypted.