Database Access Control via Security Table Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing database security systems lack effective mechanisms to ensure safe and regulated access to sensitive data, often allowing unauthorized access due to inadequate categorization and access control methods.
Innovation Solution
A database access control system that parses user credentials and data requests, queries an authorization table to generate a security table identifying accessible data categories, and then retrieves and filters data entries from a base table based on these categories, ensuring only authorized data is accessed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional database security systems are used, then data storage is simple, but unauthorized access occurs due to inadequate access control mechanisms
Solution Approach 1:
The patent segments data into categorized groups with different security levels and implements separate authorization tables for each category. This allows fine-grained access control where different users can access different data categories based on their credentials, thereby improving data protection while maintaining manageable system complexity through modular organization.
Solution Approach 2:
The patent introduces an intermediary access control system that sits between users and the database. This intermediary parses user credentials, queries authorization tables to determine permitted data categories, and filters data retrieval operations accordingly. This mediator layer enhances security without requiring fundamental changes to the underlying database structure.
2Reliability
If comprehensive access control is implemented, then data security is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal access control architecture where a single authorization table structure and credential parsing mechanism handles multiple data categories and user types. This multi-functional system can accommodate different security requirements across various data categories while using the same underlying access control logic, thereby improving comprehensive access control without proportionally increasing system complexity.
3Reliability
If data is categorized and filtered, then unauthorized access is prevented, but data retrieval time increases
Solution Approach 1:
The patent performs preliminary actions by pre-categorizing data into security groups and pre-configuring authorization tables that map user credentials to permitted data categories. When data retrieval is requested, the system quickly parses credentials and consults the pre-configured authorization tables to determine access permissions, avoiding time-consuming security checks during actual data retrieval operations.
Data Source
AI summary
A method for database access control includes receiving an access request from a requesting user, the access request identifying one or more data entries stored in a base table storing a plurality a data entries each associated with a data category. The identified one or more data entries from the base table are retrieved and a security table including one or more data categories to which the requesting user is authorized to access is generated based on an identity of the requesting user. The data entries associated with a data category included in the security table are outputted as a result table.