Data Redaction Rules for Semi-Structured Document Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Semi-structured document databases face challenges in data security due to their lack of structural precision, making it difficult to apply effective data access controls and safeguard sensitive information.
Innovation Solution
An apparatus with a processor and memory that stores a semi-structured document database, utilizing data redaction rules with configurable redaction values and formats to produce redacted documents, applying these rules to obscure or conceal sensitive information within the documents.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data access controls are applied in relational databases using structured data formats, then data security is improved, but semi-structured document databases cannot effectively apply such controls due to their lack of structural precision
Solution Approach 1:
The patent segments the semi-structured document into hierarchical levels (document level, collection level, field level) and applies access controls at each segment. This allows structured control mechanisms to be imposed on unstructured data by treating different portions of the document separately with specific access rules.
Solution Approach 2:
The patent introduces an intermediary layer (access control mechanism with path expressions and redaction rules) that bridges the gap between the structured control requirements and semi-structured data format. This intermediary translates high-level security policies into specific field-level controls within the document hierarchy.
2Reliability
If data redaction rules are applied to semi-structured documents, then sensitive information is protected, but the lack of formal structure makes it challenging to enforce hierarchical record and field controls
Solution Approach 1:
The patent implements dynamic access control where redaction rules are applied at query execution time rather than being statically enforced. The system dynamically evaluates path expressions against the semi-structured document hierarchy and applies redaction based on the specific query context, allowing flexible enforcement despite the lack of formal structure.
Solution Approach 2:
The patent changes the parameter of structure enforcement from static (requiring formal document structure) to dynamic (using path expressions that can match various hierarchical patterns). This allows the same access control mechanism to work across different semi-structured formats by adjusting the path expression parameters rather than requiring fixed document templates.
Data Source
AI summary
An apparatus has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to store a semi-structured document database including a collection of documents having semi-structured data formats. Data redaction rules are defined. Each data redaction rule includes a redaction type and a path expression to a redaction location within a semi-structured data format of a document within the collection of documents. At least one data redaction rule includes a configurable range of redaction values and a configurable format for the redaction values. The data redaction rules are applied to form redacted documents. The redacted documents are supplied.