A database is stored on a first cloud server to store encrypted files. A table stored at a second cloud server is a key value store, wherein the keys are unique secret values and the values are encrypted database values. The unique secret values relate to a specific instance of an update operation of a specific keyword. An update operation may be adding a new file to the database or deleting a file from the database. Each unique secret value is associated with an encrypted database value. A file identifier can be extracted from the encrypted database value. A file identifier identifies the location of a file in the database in the first cloud server. Each time a file containing a keyword is added or deleted from the database, a new unique secret value is generated and added to the table along with its associated encrypted database value.