Aggregation Permission Layer for Privacy-Safe Database Queries
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems struggle to provide access to data while preserving the privacy of sensitive or confidential information, as users can inadvertently access discrete data items despite having permissions, which violates regulations and compromises data security.
Innovation Solution
An aggregation permission service provider system that modifies database query responses based on predefined aggregation policies, ensuring users only access aggregated data, filtering out or obfuscating discrete data items to maintain privacy without altering the underlying data or permissioning systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users are granted access permissions to view data, then data accessibility is improved, but data privacy and security deteriorate as users can access discrete sensitive items
Solution Approach 1:
The patent introduces an intermediary layer between the data storage system and the user interface. This intermediary processes queries and responses, applying aggregation policies to transform discrete data into aggregated forms before reaching the user. The intermediary acts as a mediator that maintains user access capabilities while preventing direct access to sensitive discrete data items, thus resolving the contradiction between accessibility and privacy.
Solution Approach 2:
The patent changes the parameter of data granularity from discrete individual records to aggregated summary statistics. By transforming the data representation parameter, the system allows users to access meaningful information while the underlying discrete sensitive data remains protected. This parameter transformation enables the system to satisfy both accessibility requirements and privacy constraints.
2Object-affected harmful factors
If aggregation policies are applied to modify query responses, then data privacy is improved, but data quality and analytical usefulness deteriorate
Solution Approach 1:
The patent applies partial aggregation rather than complete anonymization. It selectively aggregates data at appropriate levels to protect privacy while preserving useful information. The system determines the minimum aggregation level needed to achieve privacy protection, avoiding excessive aggregation that would lose all analytical value. This partial action approach balances privacy protection with data quality preservation.
Solution Approach 2:
The aggregation policy system is dynamic and adapts to different query contexts, user roles, and data characteristics. Rather than applying a fixed aggregation level, the system dynamically adjusts the degree of aggregation based on the specific situation, ensuring optimal balance between privacy protection and information preservation for each query-response interaction.
3Reliability
If existing permissioning systems are enhanced with aggregation control, then data security is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal aggregation policy framework that can be applied across different database systems, query types, and user roles. Rather than creating separate security mechanisms for each scenario, the system uses a single multi-functional policy engine that handles various security requirements through configurable aggregation rules, reducing overall system complexity while improving security.
Solution Approach 2:
The system incorporates self-service capabilities where the aggregation policy engine automatically processes queries and applies appropriate aggregation transformations without requiring manual intervention. The system self-adjusts based on predefined policies and contextual information, reducing the operational complexity burden on administrators while maintaining strong security controls.
Data Source
AI summary
Computer apparatus for providing a response to a query comprises one or more processors and non-transitory memory, and computer code stored in the non-transitory memory and operable when executed by the one or more processors to cause the one or more processors to perform:storing, at an aggregation permission service, at least one aggregation policy, each of the at least one aggregation policy associated with a resource and each of the at least one aggregation policy including:at least one condition defining a policy over aggregation results, andat least one action associated with each condition;receiving, at the aggregation permission service, response data from the resource, the response data relating to a user query for data;identifying, at the aggregation permission service, the aggregation policy relating to the resource from which the response data was received;in response to determining that at least condition from the identified aggregation policy is met, at the aggregation permission service, applying the at least one action associated with the condition that was determined to be met such as to produce modified response data; andproviding, from the aggregation permission service to a user terminal, the modified response data