Database Anonymization via Linked Additional Data Elements

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing database systems face challenges in efficiently providing anonymized data elements while protecting sensitive information, as existing methods often require complex integration with access processes and may not ensure irreversible mapping of original values to anonymized values.

Innovation Solution

A method and system that create additional data elements in a database system, using mapping rules to generate anonymized values from original values, allowing these anonymized values to be accessed similarly to original values, with optional irreversible mapping for enhanced protection, and integrating authorization checks to determine whether to transmit original or anonymized values based on user access rights.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If anonymized values are generated and stored in additional data elements independently of access commands, then access speed and process simplicity are maintained, but database structure and storage requirements increase

Engineering Contradiction:
Improveaccess speedVSAvoiddatabase structure
Core Design Contradiction:
SpeedVSDevice complexity

Solution Approach 1:

The patent segments the data storage structure by creating separate additional data elements for anonymized values, distinct from the original data elements containing sensitive information. This segmentation allows the database to maintain original data integrity while providing anonymized access paths, resolving the contradiction between fast access and structural complexity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The additional data elements act as intermediaries between users and the original sensitive data. These intermediary elements store anonymized values that can be quickly retrieved without exposing underlying sensitive information, thereby maintaining access speed while protecting data security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If mapping rules are stored in the database system for determining anonymized values, then data protection is enhanced, but system complexity and storage requirements increase

Engineering Contradiction:
Improvedata protectionVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by pre-storing mapping rules in the database system that define how original values are transformed into anonymized values. These pre-configured rules enable consistent and reliable anonymization without requiring complex runtime processing, thus enhancing data protection while managing system complexity.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If additional data elements are created and linked to original data elements, then anonymized access is enabled without exposing sensitive data, but database operations and maintenance complexity increase

Engineering Contradiction:
Improvedata securityVSAvoiddatabase operations
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent merges the functionality of original data elements and anonymized access elements into a unified database structure. By linking additional data elements to original data elements through defined relationships, the system enables both sensitive data storage and anonymized access through integrated operations, reducing maintenance complexity despite the added security layer.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentEP2843585B1Method and system for providing anonymised data from a database
Publication Date: 2019.08.14 KABEL DEUT VERTRIEB & SERVICE
  • EP2843585B1 patent drawingFigure 1
  • EP2843585B1 patent drawingFigure 2a~2c
  • EP2843585B1 patent drawingFigure 3

AI summary

The invention relates to methods for providing an anonymized value of a data element stored with an original value in a database (11) of a database system (10), wherein the method comprises the following steps: (i) generating an additional data element for the data element stored in the database (11); (ii) determining the anonymized value of the data element from the original value using a mapping rule stored in the database system (10) for determining anonymized values ​​and storing the anonymized value in the additional data element; and (ii) linking the additional data element with the data element such that, upon receipt of an access command relating to the data element from a user connected to the database system, the additional data element is read and the anonymized value contained therein is transmitted to the user.Furthermore, the invention relates to a system suitable for carrying out the method and to a computer program.