Privacy-Preserving Column Ownership Transfer in Encrypted DBMS
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack effective methods for managing fine-grained privacy-preserving columns, particularly in ensuring secure ownership transfer and reverting accidental transfers in a hardware-encrypted database environment.
Innovation Solution
Implementing a catalog table within a hardware-encrypted database management system (DBMS) to record ownership information of privacy-preserving columns, allowing only the owner to execute data control language (DCL) operations and enabling reversion of accidental ownership transfers through a trust execution environment (TEE-based VM) with encryption and remote attestation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If ownership transfer of privacy-preserving columns is enabled, then data access flexibility is improved, but risk of accidental unauthorized transfers increases
Solution Approach 1:
The system performs preliminary verification of user authorization status before allowing ownership transfer operations. The DBMS checks whether the initiating user is the current owner of the privacy-preserving column and whether the target user has appropriate credentials, preventing accidental or unauthorized transfers before they occur.
Solution Approach 2:
The system provides feedback mechanisms including confirmation prompts before ownership transfer and audit logs that record all ownership change operations. This feedback loop allows users to verify transfer details and administrators to monitor and revert suspicious operations, balancing flexibility with reliability.
2Reliability
If fine-grained privacy control is implemented, then data security is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal ownership management framework that handles multiple privacy-preserving columns through a single standardized interface. The DBMS provides unified DCL operations (GRANT, REVOKE, TRANSFER) that work across different columns and user types, reducing management complexity while maintaining fine-grained security control.
Solution Approach 2:
The system introduces an intermediary ownership management layer between users and the underlying encrypted data. This layer abstracts complex cryptographic operations and permission checks into simple DCL statements, allowing users to manage privacy controls without directly handling encryption keys or cryptographic protocols.
3Reliability
If hardware encryption is used for privacy-preserving columns, then encryption security is improved, but operational overhead increases
Solution Approach 1:
The hardware encryption system operates autonomously through hardware security modules that automatically manage key generation, storage, and cryptographic operations. Ownership transfers and access controls are enforced by the DBMS through software-based permission checks that do not require manual cryptographic operations, allowing efficient ownership management while maintaining hardware-level encryption security.
Data Source
AI summary
The present disclosure describes techniques for managing ownerships of fine-grained privacy-preserving columns. A catalog table configured to record ownership information of the fine-grained privacy-preserving columns is created. A fine-grained privacy-preserving column is created in response to receiving a first instruction from a first user. The first user is an owner of the fine-grained privacy-preserving column. An ownership of the fine-grained privacy-preserving column is transferred from the first user to a second user in response to receiving a second instruction from the first user. The catalog table is updated by inserting a first row into the catalog table in response to detecting a transfer of the ownership of the fine-grained privacy-preserving column to the second user. The first row of the catalog table records information indicating that the first user is a previous owner of the fine-grained privacy-preserving column.