Database Anonymization via Linked Additional Data Elements
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing database systems face challenges in efficiently providing anonymized data elements while protecting sensitive information, as existing methods often require complex integration with access processes and may not ensure irreversible mapping of original values to anonymized values.
Innovation Solution
A method and system that create additional data elements in a database system, using mapping rules to generate anonymized values from original values, allowing these anonymized values to be accessed similarly to original values, with optional irreversible mapping for enhanced protection, and integrating authorization checks to determine whether to transmit original or anonymized values based on user access rights.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If anonymized values are generated and stored in additional data elements independently of access commands, then access speed and process simplicity are maintained, but database structure and storage requirements increase
Solution Approach 1:
The patent segments the data storage structure by creating separate additional data elements for anonymized values, distinct from the original data elements containing sensitive information. This segmentation allows the database to maintain original data integrity while providing anonymized access paths, resolving the contradiction between fast access and structural complexity.
Solution Approach 2:
The additional data elements act as intermediaries between users and the original sensitive data. These intermediary elements store anonymized values that can be quickly retrieved without exposing underlying sensitive information, thereby maintaining access speed while protecting data security.
2Reliability
If mapping rules are stored in the database system for determining anonymized values, then data protection is enhanced, but system complexity and storage requirements increase
Solution Approach 1:
The patent implements preliminary action by pre-storing mapping rules in the database system that define how original values are transformed into anonymized values. These pre-configured rules enable consistent and reliable anonymization without requiring complex runtime processing, thus enhancing data protection while managing system complexity.
3Reliability
If additional data elements are created and linked to original data elements, then anonymized access is enabled without exposing sensitive data, but database operations and maintenance complexity increase
Solution Approach 1:
The patent merges the functionality of original data elements and anonymized access elements into a unified database structure. By linking additional data elements to original data elements through defined relationships, the system enables both sensitive data storage and anonymized access through integrated operations, reducing maintenance complexity despite the added security layer.
Data Source
Figure 1
Figure 2a~2c
Figure 3
AI summary
The invention relates to methods for providing an anonymized value of a data element stored with an original value in a database (11) of a database system (10), wherein the method comprises the following steps: (i) generating an additional data element for the data element stored in the database (11); (ii) determining the anonymized value of the data element from the original value using a mapping rule stored in the database system (10) for determining anonymized values and storing the anonymized value in the additional data element; and (ii) linking the additional data element with the data element such that, upon receipt of an access command relating to the data element from a user connected to the database system, the additional data element is read and the anonymized value contained therein is transmitted to the user.Furthermore, the invention relates to a system suitable for carrying out the method and to a computer program.