Biometric Big Data Access Control via Token Masking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securing big data access are inadequate due to the high volume of data, providing only one layer of protection, and failing to secure data during transfer, making big data vulnerable to security threats.
Innovation Solution
A method and system using a data access device that receives biometric data to authenticate users and selectively provides access to big data by replacing actual data with other data based on parameters and user privileges, ensuring multiple layers of security through masking and unmasking processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional database security methods are used, then security is provided for traditional databases, but these methods cannot be implemented for big data due to huge volume
Solution Approach 1:
The patent changes the security approach from traditional row-level or column-level security to a token-based system where data is encrypted using dynamic tokens. This parameter change in the security mechanism allows it to scale with big data volumes while maintaining security effectiveness.
Solution Approach 2:
The patent introduces tokens as intermediary elements between users and actual data. Instead of direct access control, tokens mediate the access process by encrypting data and requiring token-based decryption keys, making the security system adaptable to big data environments.
2Device complexity
If one layer of data protection is provided, then implementation is simple, but if the first layer is breached, big data may be automatically accessible
Solution Approach 1:
The patent implements nested security layers by encrypting data with multiple tokens where each token provides an additional layer of protection. The data is wrapped in multiple encryption layers similar to nested dolls, where breaching one layer does not expose the underlying data without additional tokens.
Solution Approach 2:
The patent segments the security mechanism into multiple independent token layers. Each token represents a separate security credential that must be combined to access the data, dividing the security function into manageable segments that work together to provide robust protection.
3Reliability
If existing security methods are used, then access control is provided, but security during data transfer is not ensured
Solution Approach 1:
The patent creates a universal token-based encryption system that serves multiple functions: access control, data transfer security, and storage protection. The same token mechanism works across all these scenarios, providing ease of operation while ensuring security during data transfer without requiring separate security mechanisms.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In one embodiment, a method for providing access to big data is disclosed. The method includes receiving, by a data access device, biometric data of a user to provide access to columns of a table storing the big data, wherein one or more columns of the table are masked based on one or more data parameters and authenticating, by the data access device, the user by comparing the biometric data of the user with pre-stored biometric data, wherein the pre-stored biometric data is retrieved from a biometric database. Further, the method includes providing, by the data access device, upon the authentication, selective access to each column of the table based on a pre-defined user privilege for each column.