US Patent 11762846 Key prefix driven data encryption in tree structures

The subject technology receives a transaction for performing an operation on a distributed database, the transaction associated with an account. The subject technology identifies a tenant corresponding to the account associated with the transaction. The subject technology retrieves a set of encryption keys based at least in part on the account and the tenant. The subject technology determines a derived encryption key using a cryptographic hash function applied to a hybrid tenant master encryption key and a local random generated identifier. The subject technology encrypts a record value and a key value associated with transaction using the derived encryption key. The subject technology determines a tree structure associated with the tenant. The subject technology determines a non-leaf node using a tenant prefix of the tenant. The subject technology inserts the encrypted record value, and the encrypted key value at a leaf node below the non-leaf node of the tree structure.