Adaptive Encryption for Data Blocks Based on User Attributes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing database security systems face inefficiencies in controlling access to files with varying security requirements, leading to resource wastage and vulnerability to unauthorized access, as they often apply generic security measures and fail to detect suspicious usage patterns.
Innovation Solution
Implementing an adaptive authorization token that stores user attributes and usage history to dynamically adjust access permissions and encryption levels based on user behavior, applying different encryption algorithms to different parts of a file and generating self-decryption modules for secure data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If generic security measures are applied to all files in the data store, then all files can be accessed by users with appropriate credentials, but this results in inefficient use of processing resources and fails to provide differentiated security for files with different security requirements
Solution Approach 1:
The patent implements dynamic access control where security permissions are not static but adapt based on user behavior patterns. The system continuously monitors usage patterns and adjusts access permissions in real-time, transforming the security mechanism from a static generic approach to a dynamic adaptive one that differentiates security levels without requiring complex manual configuration for each file
Solution Approach 2:
The system changes security parameters based on observed usage patterns. By monitoring how users interact with files and detecting deviations from normal behavior, the system dynamically adjusts security parameters such as access permissions and encryption levels, enabling differentiated security without hardcoding complex rules for each file type
2Reliability
If the same encryption level is applied to all data blocks, then security requirements are met, but this leads to inefficient use of processing resources when most data is public information
Solution Approach 1:
The patent applies different encryption levels to different blocks of data within the same file based on their sensitivity. Public information blocks use lighter or no encryption while sensitive blocks containing personal information use strong encryption. This local differentiation ensures security requirements are met for sensitive data while improving processing efficiency for the majority of public data
Solution Approach 2:
The system segments files into multiple data blocks and applies differential encryption to each block based on its content sensitivity. By dividing the file and applying selective encryption to only the necessary sensitive portions rather than encrypting the entire file, the system achieves both security compliance and processing efficiency
3Ease of operation
If access tokens transmit credentials by default, then user authentication is simplified, but this allows bad actors to intercept credentials and gain access to sensitive files
Solution Approach 1:
The system performs preliminary analysis of the communication environment before transmitting credentials. It assesses network security, detects potential threats, and only transmits credentials when the environment is deemed safe. This preliminary action prevents credential interception by bad actors while maintaining ease of operation for legitimate users
Solution Approach 2:
The system implements feedback mechanisms that continuously monitor authentication transactions for suspicious patterns. When abnormal authentication attempts are detected, the system adjusts its behavior by blocking credential transmission or requiring additional verification, thereby preventing interception attacks while maintaining smooth operation for normal users
4Adaptability or versatility
If separate data stores are used for information with different security requirements, then security differentiation is achieved, but this results in redundant storage of files across multiple data stores
Solution Approach 1:
The patent implements a universal data store that can handle files with different security requirements within a single repository. By combining adaptive access control and differential encryption, the system provides multi-functionality where one data store serves multiple security levels, eliminating the need for separate data stores and reducing data redundancy
Data Source
AI summary
A system includes a data store, memory, and hardware processor. The data store includes a dataset with first and second blocks of data. The memory stores first and second encryption algorithms. The processor receives a request to transmit the dataset to a first user's device. The processor encrypts the dataset by applying the first encryption algorithm to the first block and the second encryption algorithm to the second block, in response to determining a first level of security for the first block and a second level of security for the second block. The processor also applies an access control to the encrypted dataset, based on a characteristic of the first user, and transmits the encrypted dataset to the first user. The access control prevents a second user with a characteristic incompatible with the characteristic of the first user from accessing the encrypted dataset.